Third Party Cyber Assurance Analyst

Reference: 5np692oapineihcjn4eh

We are seeking a Third Party Cyber Assurance Analyst to support the assessment and ongoing monitoring of suppliers, partners, and service providers that have access to sensitive information or critical systems. You will help ensure that third parties meet required cybersecurity, privacy, and resilience standards throughout the relationship lifecycle, from onboarding and due diligence through to renewal, remediation, and exit. This role will work closely with procurement, legal, risk, technology, and business stakeholders to identify and manage third-party cyber risk effectively.

Key responsibilities will include reviewing security questionnaires, independent assurance reports, certifications, penetration testing results, policies, and other evidence provided by third parties. You will assess control effectiveness against recognised frameworks and internal requirements, document findings, assign risk ratings, and track corrective actions through to completion. You will maintain accurate records of assessments and risk decisions, produce clear management information, and escalate significant issues or overdue remediation where appropriate. The role will also contribute to improving assessment methodologies, strengthening supplier security requirements, and supporting periodic reviews of higher-risk relationships.

The successful candidate will have experience in third-party risk management, cyber assurance, information security, technology risk, audit, or a related discipline. You should be comfortable interpreting technical and non-technical evidence, challenging responses constructively, and communicating risk clearly to stakeholders with varying levels of technical knowledge. Familiarity with frameworks and standards such as ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS, or equivalent regulatory requirements is desirable. Strong analytical, organisational, and report-writing skills are essential, along with the ability to manage multiple assessments and deadlines. Relevant professional qualifications in cybersecurity, information assurance, risk, audit, or privacy would be advantageous.

COMPETITIVE SALARY
Added 23/09/2026
Reference: 5np692oapineihcjn4eh

Other similar jobs

Senior Threat Intelligence Analyst

Added 02/10/2026

We are seeking a Senior Threat Intelligence Analyst to lead the collection, analysis and communication of intelligence relating to cyber threats, threat actors and emerging risks. You will assess information from open-source, commercial, technical and internal sources to identify relevant developments and produce clear, actionable intelligence for security, technology and business stakeholders. The role will involve developing intelligence assessments, tracking threat actor activity, analysing tactics, techniques and procedures, and supporting the improvement of organisational threat awareness and resilience. Key responsibilities include maintaining threat intelligence requirements and collection plans; monitoring geopolitical, criminal and technology-related developments; conducting strategic, operational and tactical analysis;...

Learn more

Information Security Third Party Assurance Analyst

Added 03/09/2026

We are seeking an Information Security Third Party Assurance Analyst to support the assessment and ongoing oversight of the organisation’s suppliers, partners and other external service providers. In this role, you will help ensure that third parties meet required information security, privacy, resilience and risk management standards before and throughout the relationship lifecycle. You will work closely with procurement, legal, technology, privacy, risk and business teams to provide clear, practical assurance and support informed risk-based decisions. Your responsibilities will include reviewing supplier security questionnaires, independent assurance reports, policies, certifications and other evidence; assessing controls against recognised frameworks and internal requirements;...

Learn more

Information Security - Risk Analyst (Third Party Risk)

Added 29/09/2026

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle. Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps,...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite. You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to support the effective management of cyber security risks arising from suppliers, service providers and other external partners. In this role, you will help strengthen third-party assurance processes, provide informed risk assessments and ensure that external relationships meet applicable security, regulatory and contractual requirements. This is an interim opportunity suited to a practical professional who can quickly understand existing processes, identify gaps and deliver measurable improvements. Your responsibilities will include reviewing supplier security documentation, assessments, certifications and control evidence; conducting risk-based due diligence for new and existing third parties; and...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to provide expert assurance and governance across the organisation’s supplier and outsourcing landscape. This role will focus on assessing and managing cyber security risks arising from third parties, helping to ensure that external providers meet required security, resilience, privacy and regulatory standards. The successful candidate will work closely with procurement, technology, risk, legal and business stakeholders to strengthen oversight practices and support informed risk-based decision-making. Key responsibilities will include reviewing third-party security assessments, due diligence questionnaires, audit reports, penetration testing results, remediation plans and contractual security requirements. You will identify control...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to strengthen the oversight of suppliers, outsourcing partners and other external service providers. This role will help ensure that third-party relationships meet required cybersecurity, information security, privacy and operational resilience standards. You will assess supplier risk, review control environments and provide practical recommendations to improve the management of external dependencies across the organisation. Key responsibilities will include conducting cyber and information security assessments during supplier onboarding, periodic reviews and significant changes to services. You will analyse security questionnaires, independent assurance reports, penetration-testing summaries, policies, risk registers and remediation plans, identifying gaps...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to strengthen the management and assurance of cyber security risks arising from suppliers, outsourcing arrangements and other external partners. This interim role will provide practical oversight across the third-party lifecycle, helping to ensure that security requirements are clearly defined, assessed and monitored in line with internal policies, regulatory expectations and recognised industry standards. Key responsibilities will include reviewing supplier security assessments, due diligence questionnaires, independent assurance reports and risk evidence; identifying control gaps and documenting associated risks; and recommending appropriate remediation actions or mitigating controls. You will work closely with...

Learn more

Senior Consultant, Technology Implementation, Third Party Management, Extended Enterprise, Cyber

Added 28/09/2026

We are seeking a Senior Consultant to support technology implementation and third-party management initiatives across an organisation’s extended enterprise and cyber risk landscape. This role will help clients understand, manage and improve the security, resilience and performance of their relationships with suppliers, partners, contractors and other external stakeholders. You will work closely with business, technology, procurement, risk and compliance teams to deliver practical solutions aligned with strategic objectives and regulatory expectations. Responsibilities will include leading or contributing to third-party risk assessments, due diligence reviews, control evaluations and remediation programmes. You will help design and implement technology-enabled processes for supplier onboarding,...

Learn more

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex supplier and partner ecosystem. In this role, you will develop and oversee a proportionate third-party cyber risk management framework, helping ensure that suppliers meet security expectations throughout the procurement, onboarding, monitoring, renewal and offboarding lifecycle. You will work closely with procurement, legal, information security, technology, risk and business stakeholders to embed effective controls and provide clear, practical advice. Your responsibilities will include conducting and overseeing supplier cyber risk assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps,...

Learn more

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across our external supplier and partner ecosystem. In this role, you will lead the development and delivery of a robust third-party cyber risk management programme, helping ensure that suppliers meet required security, resilience, privacy and regulatory standards. You will work closely with procurement, legal, technology, information security, risk and business teams to embed effective controls throughout the supplier lifecycle. Your responsibilities will include defining and maintaining third-party cyber risk policies, standards, procedures and assessment methodologies; conducting risk assessments and due diligence for...

Learn more

Director, IT Security Third Party Monitor & Compliance

Added 09/09/2026

We are seeking a Director, IT Security Third Party Monitor & Compliance to lead the governance, oversight, and continuous improvement of third-party information security and compliance activities. This senior role will establish and maintain a comprehensive framework for assessing suppliers, service providers, and strategic partners throughout the relationship lifecycle. You will ensure that third-party risks are identified, evaluated, documented, and managed in line with applicable regulatory obligations, internal policies, contractual requirements, and recognised industry standards. Key responsibilities include directing third-party security assessments, reviewing control evidence, monitoring remediation plans, and providing clear risk-based reporting to senior leadership and relevant governance committees....

Learn more

Third Party Security Due Diligence Lead

Added 09/09/2026

We are seeking a Third Party Security Due Diligence Lead to oversee the assessment and management of information security risks associated with suppliers, partners and other external service providers. In this role, you will lead the end-to-end due diligence process, ensuring that third parties meet defined security, privacy, resilience and compliance requirements before and throughout the relationship lifecycle. You will work closely with procurement, legal, privacy, technology, risk and business stakeholders to provide clear, practical and risk-based recommendations. Your responsibilities will include designing and maintaining third-party security assessment processes, reviewing security questionnaires and supporting evidence, and evaluating controls across areas...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.