Senior Analyst, Third Party Risk Management

Join our Information Security team and help us understand and manage the cybersecurity risks associated with our suppliers and service providers.

You will lead security reviews, monitor third-party risks, and work with teams across the business to turn technical findings into practical actions. As our first dedicated Third-Party Risk Management hire in EMEA, you will have the opportunity to help shape how we develop this important capability across the region. 

• →Lead cybersecurity reviews of new suppliers and services, considering the data they access, the systems they connect to, and their importance to our business.
• →Review supplier questionnaires and security documentation, including SOC 2 reports, ISO 27001 certifications, penetration test summaries, and business continuity plans.
• →Identify security gaps and explain the potential business impact in clear, straightforward language.
• →Recommend practical actions to reduce risk and support suppliers in addressing outstanding security concerns.
• →Partner with Procurement, Legal, Privacy, Information Security, and business teams throughout the supplier lifecycle.
• →Monitor existing suppliers for emerging risks, security incidents, control changes, and other warning signs.
• →Carry out regular supplier reassessments based on risk level, business criticality, regulatory requirements, and changes to services.
• →Maintain accurate records and provide clear reporting on assessments, risk ratings, remediation actions, and overdue reviews

• →Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, or a related field, or equivalent practical experience is preferred
• →At least 3 years of experience in cybersecurity, third-party risk management, IT audit, security compliance, vendor assurance, or a related area.
• →Practical experience assessing the cybersecurity controls of suppliers or service providers, ideally within a large or complex organisation.
• →Familiarity with standards and frameworks such as SOC 2, ISO 27001, PCI DSS, NIS2, DORA, or NIST.
• →Experience using a Third-Party Risk Management or GRC platform, such as OneTrust, ProcessUnity, or a similar tool.
• →The ability to review security evidence, identify gaps, and reach balanced, risk-based conclusions.
• →Strong communication skills, with the ability to make technical information clear and relevant to different audiences.
• →Good organisational skills and the ability to manage several reviews and priorities at the same time.
• →Professional certifications such as CISA, CRISC, CISSP, CTPRP, or Security+ are welcome but not essential. 

You do not need to meet every preferred qualification to apply. If your experience is relevant and you are interested in developing your career in third-party cybersecurity risk, we would like to hear from you.

Digital Realty is a leading provider of carrier- and cloud-neutral data centre services. We deliver a broad range of data centre, colocation, and interconnection solutions.

PlatformDIGITAL®, our global data centre platform, gives customers a secure place to bring together the data communities that matter to them. Through more than 300 facilities across over 50 metropolitan areas, 28 countries, and six continents, we help organisations connect their data and infrastructure and prepare for the digital future.

More than 3,500 colleagues around the world work together to develop solutions and create connections that matter every day.