Director, IT Security Third Party Monitor & Compliance

Reference: jui8bn6gsihbsnhl7x66

We are seeking a Director, IT Security Third Party Monitor & Compliance to lead the governance, oversight, and continuous improvement of third-party information security and compliance activities. This senior role will establish and maintain a comprehensive framework for assessing suppliers, service providers, and strategic partners throughout the relationship lifecycle. You will ensure that third-party risks are identified, evaluated, documented, and managed in line with applicable regulatory obligations, internal policies, contractual requirements, and recognised industry standards.

Key responsibilities include directing third-party security assessments, reviewing control evidence, monitoring remediation plans, and providing clear risk-based reporting to senior leadership and relevant governance committees. You will oversee the development of risk thresholds, metrics, dashboards, and escalation processes, while partnering with procurement, legal, technology, privacy, enterprise risk, and business stakeholders. The role will also lead the review and enhancement of security clauses, due diligence procedures, ongoing monitoring practices, exception management, and audit readiness. You will manage and develop a team of security and compliance professionals, promote consistent operating standards, and support responses to regulatory reviews, internal audits, and customer assurance requests.

The successful candidate will bring substantial experience in third-party risk management, information security governance, technology compliance, or a related discipline, including significant leadership experience in complex, regulated environments. Strong knowledge of frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, privacy regulations, and relevant outsourcing guidance is highly desirable. You should be confident interpreting technical and audit information, challenging stakeholders constructively, and communicating material risks to both technical and executive audiences. Excellent analytical, organisational, negotiation, and presentation skills are essential, together with the ability to manage competing priorities and influence outcomes across a matrixed organisation. Professional certifications such as CISSP, CISM, CRISC, CISA, or relevant third-party risk qualifications would be advantageous.

COMPETITIVE SALARY
Added 09/09/2026
Reference: jui8bn6gsihbsnhl7x66

Director, IT Security Third Party Monitor & Compliance

London, England, United Kingdom Permanent Compliance

Other similar jobs

Assistant Vice President, Cyber & Network Security Engineer

Added 14/09/2026

We are seeking an experienced Assistant Vice President, Cyber & Network Security Engineer to lead the design, implementation and continuous improvement of enterprise security capabilities. This role combines strategic leadership with hands-on technical expertise, supporting the protection of critical infrastructure, applications, data and networks against evolving cyber threats. The successful candidate will work closely with technology, risk, compliance and business stakeholders to establish resilient, risk-based security solutions aligned with organisational objectives and regulatory expectations. Key responsibilities will include defining and maintaining network security architecture, security standards and engineering roadmaps; overseeing the deployment and optimisation of firewalls, intrusion prevention, secure access,...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Third Party Security Due Diligence Lead

Added 09/09/2026

We are seeking a Third Party Security Due Diligence Lead to oversee the assessment and management of information security risks associated with suppliers, partners and other external service providers. In this role, you will lead the end-to-end due diligence process, ensuring that third parties meet defined security, privacy, resilience and compliance requirements before and throughout the relationship lifecycle. You will work closely with procurement, legal, privacy, technology, risk and business stakeholders to provide clear, practical and risk-based recommendations. Your responsibilities will include designing and maintaining third-party security assessment processes, reviewing security questionnaires and supporting evidence, and evaluating controls across areas...

Learn more

Third Party Cyber Risk Lead

Added 21/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex network of suppliers, partners and outsourced service providers. This is a key role responsible for ensuring that third parties meet appropriate security expectations throughout the procurement, onboarding, monitoring and offboarding lifecycle. You will develop and maintain a proportionate third-party cyber risk management framework, including security standards, assessment methodologies, risk-rating criteria and assurance requirements. Working closely with procurement, legal, technology, information security and business stakeholders, you will assess supplier risks, identify control gaps and agree practical remediation plans. You will...

Learn more

Senior Consultant, Third Party Risk Management, FS, Extended Enterprise

Added 19/10/2026

We are seeking a Senior Consultant to support the delivery of third-party risk management services across the financial services sector. This role will work with clients to understand their extended enterprise, assess risks arising from suppliers and other external relationships, and design practical, proportionate approaches to managing those risks. You will contribute to engagements from initial scoping and risk assessment through to implementation, monitoring and continuous improvement. Responsibilities will include reviewing and enhancing third-party risk management frameworks, policies, processes and controls; conducting supplier due diligence and risk assessments; supporting outsourcing and material third-party assessments; and evaluating arrangements against relevant regulatory...

Learn more

Senior Manager, Third Party Risk Management, FS, Extended Enterprise

Added 19/10/2026

We are seeking an experienced Senior Manager to lead third-party risk management across a financial services environment and the wider extended enterprise. This is a strategic role for someone who can strengthen governance, improve resilience and provide clear oversight of suppliers, outsourcing arrangements, strategic partners and other external dependencies. You will work closely with senior stakeholders across procurement, technology, information security, compliance, legal, operational resilience and business functions to ensure third-party relationships are managed in line with regulatory expectations and organisational risk appetite. Your responsibilities will include developing and embedding the third-party risk management framework, policies, standards and procedures; overseeing...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite. You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to provide expert assurance and governance across the organisation’s supplier and outsourcing landscape. This role will focus on assessing and managing cyber security risks arising from third parties, helping to ensure that external providers meet required security, resilience, privacy and regulatory standards. The successful candidate will work closely with procurement, technology, risk, legal and business stakeholders to strengthen oversight practices and support informed risk-based decision-making. Key responsibilities will include reviewing third-party security assessments, due diligence questionnaires, audit reports, penetration testing results, remediation plans and contractual security requirements. You will identify control...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to strengthen the management and assurance of cyber security risks arising from suppliers, outsourcing arrangements and other external partners. This interim role will provide practical oversight across the third-party lifecycle, helping to ensure that security requirements are clearly defined, assessed and monitored in line with internal policies, regulatory expectations and recognised industry standards. Key responsibilities will include reviewing supplier security assessments, due diligence questionnaires, independent assurance reports and risk evidence; identifying control gaps and documenting associated risks; and recommending appropriate remediation actions or mitigating controls. You will work closely with...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to support the effective management of cyber security risks arising from suppliers, service providers and other external partners. In this role, you will help strengthen third-party assurance processes, provide informed risk assessments and ensure that external relationships meet applicable security, regulatory and contractual requirements. This is an interim opportunity suited to a practical professional who can quickly understand existing processes, identify gaps and deliver measurable improvements. Your responsibilities will include reviewing supplier security documentation, assessments, certifications and control evidence; conducting risk-based due diligence for new and existing third parties; and...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to strengthen the oversight of suppliers, outsourcing partners and other external service providers. This role will help ensure that third-party relationships meet required cybersecurity, information security, privacy and operational resilience standards. You will assess supplier risk, review control environments and provide practical recommendations to improve the management of external dependencies across the organisation. Key responsibilities will include conducting cyber and information security assessments during supplier onboarding, periodic reviews and significant changes to services. You will analyse security questionnaires, independent assurance reports, penetration-testing summaries, policies, risk registers and remediation plans, identifying gaps...

Learn more

Senior Consultant, Technology Implementation, Third Party Management, Extended Enterprise, Cyber

Added 28/09/2026

We are seeking a Senior Consultant to support technology implementation and third-party management initiatives across an organisation’s extended enterprise and cyber risk landscape. This role will help clients understand, manage and improve the security, resilience and performance of their relationships with suppliers, partners, contractors and other external stakeholders. You will work closely with business, technology, procurement, risk and compliance teams to deliver practical solutions aligned with strategic objectives and regulatory expectations. Responsibilities will include leading or contributing to third-party risk assessments, due diligence reviews, control evaluations and remediation programmes. You will help design and implement technology-enabled processes for supplier onboarding,...

Learn more

Third Party Cyber Assurance Analyst

Added 23/09/2026

We are seeking a Third Party Cyber Assurance Analyst to support the assessment and ongoing monitoring of suppliers, partners, and service providers that have access to sensitive information or critical systems. You will help ensure that third parties meet required cybersecurity, privacy, and resilience standards throughout the relationship lifecycle, from onboarding and due diligence through to renewal, remediation, and exit. This role will work closely with procurement, legal, risk, technology, and business stakeholders to identify and manage third-party cyber risk effectively. Key responsibilities will include reviewing security questionnaires, independent assurance reports, certifications, penetration testing results, policies, and other evidence provided...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.