Customer Assurance & Supplier Risk Analyst

This is a new role with responsibility for two closely connected areas of business assurance.

Customer Assurance: Restore's customers are predominantly other businesses and organisations. As part of selecting, onboarding and periodically reviewing Restore as one of their suppliers, those customers regularly send us detailed questionnaires covering areas such as information security, data protection, business continuity, quality, health and safety, environmental management, governance, ethics and other business controls.

You will coordinate and manage Restore's response to these customer assurance and due diligence questionnaires, working with subject-matter experts across the business to obtain accurate information and supporting evidence and ensuring responses are completed accurately and on time.

Supplier Risk: Looking in the opposite direction, Restore also needs to understand and manage the risks presented by organisations within its own supply chain. You will coordinate Restore's supplier due diligence and Third-Party Risk Management (TPRM) activities, including supplier onboarding, assessments, ongoing monitoring, remediation and reporting.

We are looking for someone who is analytical in the broader sense: curious, logical, comfortable working with detailed information, able to identify gaps and inconsistencies, and capable of turning information into clear conclusions and actions.

Key Responsibilities

Customer Assurance

Coordinate and complete B2B customer assurance questionnaires, supplier assessments, security questionnaires and other third-party due diligence requests received from Restore customers.Review incoming questionnaires, identify the information and evidence required and coordinate responses with appropriate subject-matter experts across Restore.

Manage multiple questionnaires concurrently, establishing priorities, responsibilities and deadlines and proactively following up outstanding actions.

Review responses for completeness, consistency and accuracy before submission.

Develop strong working relationships with teams including Information Security, IT, Legal, Procurement, HR, Health & Safety, Environmental, Business Continuity, Operations, Quality and other specialist functions.

Support customer Pre-Qualification Questionnaires (PQQs), Requests for Information (RFIs) and tender submissions where appropriate.

Help design, document and continuously improve Restore's end-to-end customer assurance questionnaire process.

Support the introduction and ongoing administration of a dedicated questionnaire-management platform.

Develop and maintain a central knowledge library of approved responses, supporting evidence and subject-matter ownership to improve the speed, accuracy and consistency of future submissions.

Supplier Assurance and Third-Party Risk

Coordinate supplier/vendor risk assessments in accordance with Restore's policies and procedures.

Manage supplier onboarding assessments, due diligence, ongoing monitoring and reassessment activities through Restore's third-party supply-chain risk management platform, Achilles.

Review supplier information and evidence, identify potential gaps or risks and coordinate further investigation with relevant subject-matter experts.

Track identified supplier risks, remediation actions and outstanding information through to closure.

Maintain accurate and audit-ready supplier risk records.

Produce clear management information on supplier assessment activity, outstanding actions, emerging risks and trends.

Escalate material supplier risks through the appropriate governance channels.

Process, Systems and Continuous Improvement

Identify opportunities to simplify and automate customer and supplier assurance activities.

Maintain accurate records, evidence and audit trails.

Develop effective trackers, dashboards and reporting to provide visibility of workload, response times, outstanding actions and risk.

Contribute to internal and external audits where required.

Restore Information Management is the leading UK owned provider of information management services. Specialising in secure document storage, scanning, digital mailrooms, outbound communications and hosting.