Associate Specialist, Supplier Security
Do you want to be a part of the world’s leading jewellery company? If yes, then we might have an exciting opportunity for you! You will be part of an exciting digital & tech area and work in an international organisation of can-do spirited, passionate, and performance-driven people. We value flexibility and informal working, where you are trusted to deliver and to focus on outcomes and value.
About The Role
As our new Supplier Security Associate Specialist, you will be responsible for assessing, monitoring and managing the information security risks associated with third-party vendors of Pandora. The role is to ensure that vendors comply with Pandora’s information security policies, industry regulations and best practices. Your responsibilities will include:
1. Vendors Assessment Cycle
-
Conducting information security risk assessments of third-party vendors, identifying potential threats, vulnerabilities, control and compliance gaps.
-
Providing recommendations on vendor selection based on risk analysis and security posture.
-
Continuously monitoring vendor security posture and risk levels through periodic reassessments and audits.
-
Maintaining detailed records of vendor assessments and ensure audit readiness.
2. Risk Management Initiatives
-
Educating vendors on security best practices and required improvements as part of the risk mitigation efforts.
-
Tracking, analyzing and reporting on vendor security risks, trends and remediation efforts.
-
Developing and enhancing the Vendor Risk Management (VRM) methodologies, processes and tools.
-
Staying up-to-date with emerging security threats, vulnerabilities and regulatory changes that may impact the VRM process.
In order to succeed
You are an excellent communicator with strong negotiation and stakeholder management skills, ideally from working with internal stakeholders to manage vendor relationships. You have an organized and detailed-oriented approach to your work. Additionally, we hope that you have:
-
2+ years of experience within vendor risk management, information security, or a related area
-
Bachelor's degree in cyber security, information technology, risk management, or a related field
-
Professional English proficiency, both verbal and written
-
Knowledge of cyber security frameworks, risk assessment methodologies and/or regulatory requirements would be beneficial
-
Experience with vendor risk management tools (e.g. BitSight, OneTrust, CyberVadis, CyberGRX) would be a plus
-
Certifications such as CISSP (ISC2), CISM (ISACA), CRISC (ISACA) or CTPRP (Certified Third-Party Risk Professional) would be a plus
Did we get your attention?
We hope you got all your questions answered and feel confident applying for this position, however if you have more questions regarding the position, please contact:
Kelly Kavarnou
Global Recruiter
kekav@pandora.net
If you see yourself in the position and would like to become a part of Pandora’s future, please do not hesitate to apply. We are an international team, so please make sure to send us your application in English to be considered. We look forward to hearing from you! We process applications on a continuous basis, which is why we encourage you to send your application as soon as possible. You can also read more about Pandora on our corporate site www.pandoragroup.com.
Our Office in Warsaw
You will be working out of our beautiful Regional Digital & Technology Polish HQ in Warsaw, rapidly growing environment of highly skilled and experienced colleagues. Which is a key initiative that goes along with Pandora’s experience & ambitions.
You will also be able to take part in creating eco-friendly environment – that we are not only talking about – but implementing. The result is a professional and dynamic environment that is unique, enjoyable and inspirational and delivers a true Pandora experience to anyone who works here.
About Pandora
Pandora is the world's largest jewellery brand, specialising in the design, crafting and marketing of accessible luxury jewellery made from high-quality materials. Each piece is created to inspire self-expression, allowing people to share their stories and passions through meaningful jewellery. Pandora jewellery is sold in more than 100 countries through 6,800 points of sale, including more than 2,700 concept stores.
Headquartered in Copenhagen, Denmark, Pandora employs 37,000 people worldwide and crafts its jewellery using only recycled silver and gold. Pandora is committed to leadership in sustainability and has set out to halve greenhouse gas emissions across its value chain by 2030. Pandora is listed on the Nasdaq Copenhagen stock exchange and generated revenue of DKK 31.7 billion (EUR 4.2 billion) in 2024.
At Pandora, we believe that creating an inclusive and diverse workplace and reflecting societal diversity in our customer engagement is essential to delivering on our company purpose: to give a voice to people’s loves. We dedicate ourselves to fostering, cultivating and preserving a culture of inclusion and diversity where everyone feels respected and valued.