Vendor Assurance Risk Analyst

About this role

Role: Vendor Assurance Risk Analyst

Contract: Permanent

Recruitment Partner: Kershia Broughton

Are you ready to make a difference? Join Boots as a Vendor Assurance Risk Analyst in Nottingham, Beeston and be part of a team that values collaboration, innovation, and personal growth. At Boots, we work every day to build a brilliant environment for our people, empowering them to deliver care, confidence, and connection in communities across the UK and Ireland.

What You’ll Be Doing

As a Vendor Assurance Risk Analyst, you will play a crucial role in ensuring our vendors meet the highest standards of compliance and risk management. Third party and supply chain risk is one of the fastest growing areas in Information Security and we’re expanding our capability.

We’re looking for a Third-Party Vendor Assurance Risk Analyst to help us assess, monitor and reduce risks across our internal & global vendor ecosystem.

If you enjoy working with purpose, autonomy and a strong sense of partnership across the business, this role will give you the opportunity to make a meaningful impact.

Key Responsibilities

• Assess third-party and our own supply chain risks via conducting security due-diligence reviews, analysing vendor & internal supplier risk assessments and evaluating controls against internal standards and industry best practice.
• Identify, document and report risks of vendor services, technology integrations, data processing activities and supply-chain dependencies.
• Track, manage and drive remediation of risks, working closely with vendors, internal stakeholders and improve closure times.
• Review and validate security controls implemented by third parties, including access management, data protection, incident response and infrastructure security.
• Review security clauses and compliance requirements prior to onboarding or renewal.
• Investigate security exceptions or violations for third-party services, coordinating with internal teams and external parties.
• Develop reporting and provide insights through dashboards, metrics and risk summaries for management, government forums and audit requirements.
• Contribute to continuous improvements of our internal compliance standards and third-party risk processes, frameworks and tooling to enhance visibility and control across supply chain.
• Coordinate responses to customer, client and regulatory security assurance questionnaires and assessments, providing evidence of security controls, while engaging SMEs to ensure accurate and timely submissions.

What You’ll Need To Have (our Must-haves)

• Proven experience in risk management, security operations, IT governance or compliance roles.
• Strong understanding of vendor risk, third-party assurance or supply-chain security.
• Experience reviewing vendor contracts, SLAs and security requirements.
• Ability to diagnose, isolate and resolve complex issues and recommend practical solutions.
• Strong analytical and reporting skills with ability to interpret technical information and translate into clear business focused risk statements.
• Ability to produce clear reports, dashboards and presentations.
• Strong communication skills and leadership abilities to influence at all levels and work with cross-functional teams both internally and externally.

It Would Be Great If You Also Have

• Experience in the retail or healthcare industry.
• Knowledge of vendor management systems.
• Relevant certifications in risk management or compliance.

Where Your Brilliance Can Take You

At Boots, we believe in your potential. You will have opportunities for career development and progression, with support from your team and leaders to help you grow your skills and advance your career.

Rewards Designed For You

• Boots Retirement Savings Plan (up to 6% company contribution)
• Generous employee discounts for you and a family member
• Enhanced maternity/paternity/adoption leave pay
• Access to free, 24/7 counselling and support through TELUS Health, our Employee Assistance Programme.
• Flexible benefits scheme including options for additional holiday, discounted gym membership, life assurance, and much more.

There’s lots more in our benefits and discounts, MyBoosts – there to give you that little lift in your everyday. Find out more at http://boots.jobs/rewards. Exclusions may apply; eligible roles only.

A Bit About Us

At Boots, we're proud to be an equal opportunity employer, creating a place where everyone feels welcome, supported, and free to be themselves. We believe that when our people feel valued and included, they thrive, so we're committed to creating a brilliant Boots for our people so they can make a difference for our customers and colleagues every time.

What’s next?

If you apply, our team will be in touch to let you know the outcome of your application or to arrange next steps. Where a role is advertised as full-time, we are open to discussing part-time and job share options. If you require additional support as part of the application and interview process, we are happy to provide reasonable adjustments to help you be at your best.

Boots is a Ban the Box employer and will consider the suitability of applicants with criminal convictions on a case-by-case basis.

We hope to hear from you soon.

Be brilliant with Boots.

About risk & resilience roles for ex-police

Risk management, business continuity and emergency-planning roles. Contingency planning, threat assessment and multi-agency coordination experience from policing is directly transferable.