Supplier Due Diligence Analyst (ESG) & Cyber Security

Overview

Support the global Supplier Sustainability & Risk function within Procurement by assessing supplier risks across ESG, cyber security and related dimensions throughout the supplier lifecycle.

What you'll do

• Support supplier due diligence as part of onboarding, qualification, periodic reassessment and ongoing monitoring.
• Conduct supplier risk assessments across ESG, cyber security, information security, financial stability, compliance, geopolitical, operational and business continuity risk dimensions.
• Review supplier information, responses, supporting documentation, certifications, policies and evidence to validate due diligence outcomes and identify risk indicators and information gaps.
• Review supplier cyber security documentation, including security questionnaires, ISO 27001 certifications, NIS2, SOC reports, data privacy indicators, business continuity documentation and third-party cyber risk ratings.
• Support the implementation and operational use of BitSight or similar approved cyber risk intelligence platforms, including supplier monitoring, cyber risk score analysis, follow-up of risk indicators and reporting to stakeholders.
• Monitor supplier risk intelligence sources and identify emerging risks requiring escalation, mitigation, reassessment or stakeholder review.
• Analyze supplier risk data and prepare insights, dashboards, reports and management updates for procurement and governance forums.
• Review supplier documentation and due diligence evidence against responsible sourcing, sustainability, compliance and governance requirements, highlighting concerns and coordinating follow-up.
• Coordinate remediation activities with suppliers and internal stakeholders, ensuring actions are tracked, documented and followed up within agreed timelines.
• Maintain accurate supplier risk records, assessment outcomes, documentation, dashboards and reporting within approved systems and tools.
• Collaborate with Procurement, Sustainability, Legal, Compliance, Information Security, IT and business teams to ensure an integrated supplier risk management approach.
• Contribute to continuous improvement of supplier due diligence, ESG, risk and cyber security assessment processes, templates, tools and governance routines.
• Ensure all activities comply with company policies, governance standards, confidentiality requirements and regulatory expectations.

What you'll need

• Bachelor's degree in supply chain management, Business Administration, Sustainability, Risk Management, Information Security, Finance or a related discipline.
• 5–8 years of experience in supplier risk management, due diligence, procurement, sustainability, compliance, cyber security, audit or a related field.
• Good understanding of supplier lifecycle management, third-party risk management, supplier onboarding and supplier reassessment processes.
• Knowledge of ESG frameworks, responsible sourcing practices, sustainability regulations and supply chain due diligence expectations.
• Understanding of cyber security and information security concepts, including third-party cyber risk, information security controls, ISO 27001, NIS2, SOC reports, data privacy, GDPR, business continuity and disaster recovery.
• Experience with supplier risk, due diligence, compliance, ESG or cyber risk monitoring platforms.
• Strong analytical skills and proficiency in Excel, Power BI and other data analysis or reporting tools.
• Ability to assess supplier documentation, identify gaps and translate findings into clear risk summaries and follow-up actions.
• Excellent communication and stakeholder management skills, working across procurement, suppliers, technical teams and global stakeholders.
• Strong organizational skills, attention to detail and ability to manage multiple priorities effectively.
• Curiosity, continuous learning mindset and willingness to adapt to evolving regulations, risk landscapes and digital tools.
• Business fluency in English.

Nice to have

• Experience with BitSight or similar cyber risk intelligence platforms.

Details

• Location: Pune, India.
• Employment type: Full-time.
• Flexible and hybrid working model.