Remote. Global. Fast-growing. Join Cintra and take ownership of third-party risk, supplier compliance, and vendor lifecycle management across our global business. This is a pivotal role responsible for ensuring Cintra meets client due diligence requirements while maintaining a robust vendor management and compliance programme.

🔹 Key Responsibilities

🤝 Client Supplier Requests (Cintra as Supplier)

🔹 Own client supplier registration, onboarding, recertification, and due diligence processes.

🔹 Maintain Cintra profiles within customer-mandated procurement and third-party risk platforms including Ariba, Coupa, Jaggaer, Prevalent, OneTrust, Aravo, Hyperproof, and Whistic.

🔹 Coordinate responses to security, compliance, procurement, and governance questionnaires, including SIG, SIG Lite, CAIQ, and bespoke client assessments.

🔹 Gather, validate, and submit supporting documentation from HR, Finance, Security, and Legal teams.

🔹 Maintain a centralized repository of approved responses, certifications, policies, and supporting evidence.

🔹 Coordinate review and approval workflows prior to submission.

🔹 Track request volumes, SLAs, renewal dates, and outstanding actions, escalating issues where required.

🔹 Monitor client reassessment cycles and proactively refresh documentation before expiry.

📋 Vendor Intake, Selection & Onboarding

🔹 Act as the central intake point for all new vendor requests.

🔹 Partner with business stakeholders to document requirements, anticipated spend, risk exposure, and business criticality.

🔹 Support RFI and RFP activities, vendor evaluations, reference checks, and supplier selection processes.

🔹 Maintain an accurate vendor inventory covering ownership, services provided, spend, contract details, and status.

🔹 Apply vendor risk-tiering methodologies based on operational criticality, data access, financial exposure, and regulatory impact.

🔹 Conduct pre-contract due diligence including certification reviews, financial health assessments, insurance verification, sanctions screening, and conflict-of-interest reviews.

🔹 Coordinate onboarding activities across Legal, Finance, and Security to ensure governance requirements are completed before engagement.

📑 Contract & Renewal Management

🔹 Maintain vendor contracts, renewal schedules, notice periods, and expiry dates.

🔹 Engage business owners well in advance of renewal milestones.

🔹 Lead vendor renewal assessments using performance, spend, risk, and strategic alignment data.

🔹 Support contract negotiations alongside Legal and Finance stakeholders.

🔹 Monitor vendor compliance against contractual obligations, SLAs, pricing agreements, insurance requirements, and data protection commitments.

📈 Performance & Relationship Management

🔹 Ensure all vendors have a designated internal owner and clearly defined performance expectations.

🔹 Maintain vendor scorecards and facilitate regular business reviews.

🔹 Act as the escalation point for performance issues, service disruptions, disputes, and remediation activities.

🔹 Monitor supplier organizational changes, financial concerns, incidents, acquisitions, and other events requiring reassessment.

🔹 Maintain current supplier contacts and escalation paths.

🛡️ Annual Compliance Reviews & Offboarding

🔹 Partner with Security to conduct annual and risk-triggered vendor compliance reviews.

🔹 Assess supplier security posture, certifications, insurance coverage, financial stability, and contractual compliance.

🔹 Document findings, assign risk ratings, and track remediation actions through to completion.

🔹 Support vendor exit and transition planning for critical suppliers.

🔹 Coordinate offboarding activities including access removal, data destruction, final payments, and contract closure.

📊 Reporting & Governance

🔹 Produce regular leadership reporting on vendor performance, compliance status, spend, risk exposure, review completion, and upcoming renewals.

🔹 Maintain audit-ready records and documentation.

🔹 Support internal and external audits by providing required evidence and reporting.

🤝 Cross-Functional Collaboration

🔹 Partner with Legal on contracts, renewals, regulatory obligations, confidentiality agreements, and dispute resolution.

🔹 Partner with Finance on vendor setup, payment processes, tax documentation, financial assessments, and spend management.

🔹 Partner with Security on risk assessments, questionnaires, remediation activities, and incident management.

🔹 Facilitate governance meetings and maintain clear ownership, approval, and escalation processes.

🔹 Serve as Cintra's subject matter expert for third-party risk and supplier compliance.

🚀 Process & Programme Improvement

🔹 Develop and maintain standard operating procedures, workflows, templates, and playbooks.

🔹 Identify opportunities for automation and process efficiency.

🔹 Support implementation and optimization of TPRM, procurement, governance, and contract lifecycle management tools.

🔹 Stay current with industry trends, emerging risks, regulatory requirements, and third-party risk management best practices.

✅ Required Experience & Skills

🔹 Demonstrated experience in vendor management, supplier management, procurement, third-party risk management, or a related discipline.

🔹 Proven experience managing vendor relationships across the full lifecycle.

🔹 Strong understanding of contracts, SLAs, renewals, liability, insurance, and supplier governance.

🔹 Working knowledge of SOC 2, ISO 27001, and GDPR principles.

🔹 Excellent written communication and client-facing documentation skills.

🔹 Strong organizational and project management capabilities.

🔹 Ability to influence stakeholders across multiple business functions.

🔹 Experience with Microsoft 365, procurement platforms, contract management tools, and governance systems.

⭐ Preferred Skills

🔹 Bachelor's degree in Business, Supply Chain, Risk Management, Information Systems, Law, or a related field.

🔹 Experience with Coupa, Ariba, Ironclad, Zip, ServiceNow, OneTrust, Prevalent, Whistic, Aravo, Vanta, or Drata.

🔹 Experience developing vendor scorecards and leading supplier business reviews.

🔹 Previous experience within technology, cloud services, professional services, or regulated industries.

💡 Core Competencies

🔹 Relationship management and stakeholder engagement

🔹 Commercial awareness and negotiation support

🔹 Risk-based decision making

🔹 Attention to detail and accuracy

🔹 Accountability and ownership

🔹 Cross-functional collaboration

🔹 Clear communication

🔹 Professional discretion and confidentiality

#LI-SL1