We're looking for an IT and Cyber Third Party Risk Assessor to assess supplier technology risks and strengthen security controls. The work centres on third-party risk assessments, cloud security and contract reviews.
What you'll do
- Assess third-party IT and cyber risks during due diligence and periodic reviews.
- Evaluate cloud controls, data protection and resilience across SaaS, IaaS and PaaS.
- Review application security, vulnerability and evidence.
- Challenge supplier IT and cyber contract clauses and agree risk mitigations.
- Coordinate external audits, track remediation and escalate critical supplier risks.
- Report risk trends and recommendations, improve assessment methods and train stakeholders.
What you bring
- 10+ years' professional experience in IT and cyber , focused on third-party risk assessments.
- Experience assessing cloud security across SaaS, IaaS and PaaS, plus application security, and .
- Knowledge of ISO 27001, SOC 2, and audit methodologies.
- Experience reviewing supplier IT and cyber clauses and negotiating contract changes.
- Financial services experience and a strong IT background in operational and security risk.
- Experience in process design, and risk methodology improvement.
- Experience presenting risk findings and delivering stakeholder training.
- Ability to turn technical risks into clear recommendations and influence stakeholders.
- in IT, or , or equivalent experience.
- (C1), (C1) and (C1).
Nice to have
- Familiarity with and control frameworks.
- Experience with such as AWS or HSP.
- , , or CCSK certification.
What's next?
The people who do well here are the ones who saw themselves in this description. Not because they match every line, but because the mission felt right for them.
We are actively hiring for this position. Applications are reviewed by our team, and matching profiles receive a call to discuss the role in detail.
It takes under a minute to apply. Your email, your CV. That is all we need to start the conversation.