Supplier Assurance Manager

Kingfisher•Lower Southampton Township, PA

4d•Hybrid

About The Position

The Supplier Assurance Manager plays a key role in safeguarding the organisation by leading and continuously enhancing our Third-Party Risk Management and Supplier Assurance Framework. Working closely with Information Security, Procurement, Legal, Technology and business teams, you will ensure suppliers meet security, privacy, resilience and compliance requirements, while proactively identifying, assessing and managing supply chain risks. This role is critical in enabling the secure and efficient onboarding and management of third-party services, helping to protect the business while supporting strategic growth and innovation.

Requirements

Proven experience in Information Security, Supplier Risk Management or Third-Party Risk Management (TPRM), with expertise in designing and operating supplier assurance processes at scale.
Strong knowledge of security frameworks and standards, including ISO 27001, SOC 2 and NIST, with the ability to assess complex security controls and risks.
Experience negotiating commercial agreements and advising on security requirements, risk mitigation and contractual obligations.
Excellent communication and stakeholder management skills, with the ability to translate technical concepts into clear, actionable guidance for both technical and non-technical audiences.
Proven ability to build trusted relationships, influence decisions and drive positive outcomes across all levels of an organisation.
Highly organised and analytical, with strong problem-solving, decision-making and prioritisation skills, alongside a deep understanding of emerging security threats and business risk.
A proactive and collaborative team player who demonstrates integrity, sound judgement, customer focus and a commitment to regulatory compliance, business objectives and a positive team culture.

Nice To Haves

Experience in large enterprise or multi‑brand environments
Familiarity with procurement and contracting processes
Relevant certifications (e.g. CTPRP, CISM, CRISC, ISO 27001 Lead Auditor).
English, French and Polish Language (spoken and written)

Responsibilities

Own and continuously improve the Third-Party Risk Management Framework and supplier assurance processes across the full supplier lifecycle, from onboarding through to offboarding.
Conduct security and risk assessments of suppliers, reviewing certifications, controls and evidence to ensure compliance with organisational requirements, risk appetite and industry standards.
Maintain supplier risk registers, identify control gaps and remediation actions, track progress, and escalate risks where necessary to ensure timely resolution.
Partner with Procurement, Legal and Vendor Management teams to embed security requirements into contracts, supplier engagements, subcontractor arrangements and onboarding processes.
Provide expert guidance to business stakeholders on supplier security risks, new services, technical integrations and supply chain risk management, promoting a strong security culture.
Support audits, regulatory engagements and reporting activities, maintaining key supplier assurance tools, processes and metrics, including risk profiles, OKRs and assurance documentation.
Drive continuous improvement of supplier assurance methodologies, workflows and tooling, while monitoring emerging threats, industry trends and supply chain risks to strengthen organisational resilience.