Rodeo
Get started

Boots UK

Vendor Assurance Risk Analyst

Nottingham
Posted about 9 hours ago
Sign up to applySee more jobs like this

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

Role: Vendor Assurance Risk Analyst

Contract: Permanent

Location: Nottingham, Beeston – on-site

Recruitment Partner: Kershia Broughton

Are you ready to make a difference? Join Boots as a Vendor Assurance Risk Analyst in Nottingham, Beeston and be part of a team that values collaboration, innovation, and personal growth. At Boots, we work every day to build a brilliant environment for our people, empowering them to deliver care, confidence, and connection in communities across the UK and Ireland.

What You’ll Be Doing

As a Vendor Assurance Risk Analyst, you will play a crucial role in ensuring our vendors meet the highest standards of compliance and risk management. Third party and supply chain risk is one of the fastest growing areas in Information Security and we’re expanding our capability.

We’re looking for a Third-Party Vendor Assurance Risk Analyst to help us assess, monitor and reduce risks across our internal & global vendor ecosystem.

If you enjoy working with purpose, autonomy and a strong sense of partnership across the business, this role will give you the opportunity to make a meaningful impact.

Key Responsibilities

  • Assess third-party and our own supply chain risks via conducting security due-diligence reviews, analysing vendor & internal supplier risk assessments and evaluating controls against internal standards and industry best practice.
  • Identify, document and report risks of vendor services, technology integrations, data processing activities and supply-chain dependencies.
  • Track, manage and drive remediation of risks, working closely with vendors, internal stakeholders and improve closure times.
  • Review and validate security controls implemented by third parties, including access management, data protection, incident response and infrastructure security.
  • Review security clauses and compliance requirements prior to onboarding or renewal.
  • Investigate security exceptions or violations for third-party services, coordinating with internal teams and external parties.
  • Develop reporting and provide insights through dashboards, metrics and risk summaries for management, government forums and audit requirements.
  • Contribute to continuous improvements of our internal compliance standards and third-party risk processes, frameworks and tooling to enhance visibility and control across supply chain.
  • Coordinate responses to customer, client and regulatory security assurance questionnaires and assessments, providing evidence of security controls, while engaging SMEs to ensure accurate and timely submissions.

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

What You’ll Need To Have (our Must-haves)

  • Proven experience in risk management, security operations, IT governance or compliance roles.
  • Strong understanding of vendor risk, third-party assurance or supply-chain security.
  • Experience reviewing vendor contracts, SLAs and security requirements.
  • Ability to diagnose, isolate and resolve complex issues and recommend practical solutions.
  • Strong analytical and reporting skills with ability to interpret technical information and translate into clear business focused risk statements.
  • Ability to produce clear reports, dashboards and presentations.
  • Strong communication skills and leadership abilities to influence at all levels and work with cross-functional teams both internally and externally.

It Would Be Great If You Also Have

  • Experience in the retail or healthcare industry.
  • Knowledge of vendor management systems.
  • Relevant certifications in risk management or compliance.

Where Your Brilliance Can Take You

At Boots, we believe in your potential. You will have opportunities for career development and progression, with support from your team and leaders to help you grow your skills and advance your career.

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

Rewards Designed For You

  • Boots Retirement Savings Plan (up to 6% company contribution)
  • Generous employee discounts for you and a family member
  • Enhanced maternity/paternity/adoption leave pay
  • Access to free, 24/7 counselling and support through TELUS Health, our Employee Assistance Programme.
  • Flexible benefits scheme including options for additional holiday, discounted gym membership, life assurance, and much more.

There’s lots more in our benefits and discounts, MyBoosts – there to give you that little lift in your everyday. Find out more at http://boots.jobs/rewards. Exclusions may apply; eligible roles only.

A Bit About Us

At Boots, we're proud to be an equal opportunity employer, creating a place where everyone feels welcome, supported, and free to be themselves. We believe that when our people feel valued and included, they thrive, so we're committed to creating a brilliant Boots for our people so they can make a difference for our customers and colleagues every time.

What’s next?

If you apply, our team will be in touch to let you know the outcome of your application or to arrange next steps. Where a role is advertised as full-time, we are open to discussing part-time and job share options. If you require additional support as part of the application and interview process, we are happy to provide reasonable adjustments to help you be at your best.

Boots is a Ban the Box employer and will consider the suitability of applicants with criminal convictions on a case-by-case basis.

We hope to hear from you soon.

Be brilliant with Boots.

Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

Risk Management
Security Operations
IT Governance
Compliance
Vendor Risk Assessment
Supply Chain Security
Contract Review
Analytical Reporting
Stakeholder Management
Due Diligence
Data Protection
Incident Response
Infrastructure Security
Access Management
Risk Remediation
Security Assurance

Location

Nottingham, England, United Kingdom

Sign up to applySee more jobs like this