Security Risk Analyst – 12m FTC

CBSbutler c/o Staffing 360 Solutions Limited

Security Risk Analyst

London

12 Month FTC

Salary: 60-70KPA

Hybrid – always 2-3 days in office.

Security Risk Analyst role

Our client is seeking an experienced Security Risk Analyst who will be responsible for undertaking risk assessments against critical third-party suppliers, to ensure they are adequately risk assessed against industry standards and their security risks are properly identified, documented, and managed.

The role will involve supporting various audits, assessments, and projects and will contribute to metrics that continuously monitor and report on compliance to GRC-related policies, standards, and controls.

Security Risk Analyst duties:

• To ensure critical third-party suppliers are adequately assessed against industry standards and their security risks are properly identified, documented, and managed, using the tools and technology available.
• To ensure the security posture of the third party is understood and how that risk is rated against the classification of the company’s information being processed or stored or accessed by the third party.
• To ensure the risk rating Is advised to the business relationship owner or vendor management for their acknowledgement and approval.
• To Carry out risk assessment of identified third parties from across the business, to meet the control requirements of ISO 27001 and other regulatory requirements and Standards.
• To prepare for and contribute to internal and external audit of the controls appropriate to the Third-Party Security Risk policy and process.

Security Risk Analyst Experience

• Experience working in Information Security or IT areas related to risk management, controls assurance, compliance, or cybersecurity.
• Knowledge of ISO 27001, data protection and information classification.
• Knowledge of risk management, including risks associated with third-party suppliers.
• Previous experience in the Lloyd’s market is desirable.

Knowledge

• Some experience with third party risk management platforms such as OneTrust, or similar is a plus, but not mandatory.

Qualifications

• Certified in Risk and Information Systems Control (CRISC) or similar is a plus.