About this role
Development, delivery and oversight of third party information security assessments.
- 5+ years’ experience of third party risk assessments.
- Strong understanding of industry recognized information security and data privacy standards such as Cyber Essentials, ISO 27001, NIST Cybersecurity Framework, GDPR, SOC2, CSA STAR, etc.
- Detailed working knowledge of information security controls (including cloud computing controls) and third party contractual security clauses.
- Ability to communicate effectively with a broad range of stakeholders, both internal and external, at all levels.
- Strong analytical and problem-solving skills, with excellent attention to detail.
- Definition and explanation of information security and third-party risks.
- Ability to reflect business drivers and risk appetite in third party risk assessments.
- Security certification such as CISSP, CISM, CRISC.