Third Party Assurance Manager (Information Security)

This job has now expired please search on the home page to find live IT Jobs.

What we're looking for:

As an Information Security and technical expert you will assist in the smooth running of the assurance function! You will enable us to assess and analyse the information security risk environment of external suppliers.

The Third Party Assurance Manager will perform impact assessments of external third party suppliers, identifying high risk service provision and support the IS Assurance process at every stage.

Who you'll be working with:

With over 10,000 employees and nearly 10 million customers, that's a lot of information to keep safe. We have a huge range of technologies available, as well as the opportunity to work with a range of multi-functional experts in a dynamic and an ever-changing environment.

Working in our team might not be exactly like it is in action movies, there's definitely no high-suspense sound track, but we do protect the business from the bad guys.

What you'll be doing:

Conducting timely security impact assessments of suppliers recording results accurately and initiating appropriate assurance response.

Support for the production of high quality, informative and accurate reports in respect of third party assurance assessments.

Provide advice and mentorship to partners on Information Security Minimum Requirements.

Participate in and contribute forums and bodies to help us improve risk management and Information Security controls

Ensure all activity is compliant with 3LoD, TCF, DPA and other relevant legislation

Ensure assurance portfolio of third party suppliers remains full and current

Deep understanding of the Data Protection Act, EU GDPR, PCI DSS and knowledge ISO standards in relation to Information Security and Business Continuity.

What we'll give you:

Come join us and you'll find yourself in the middle of one of the most on-the-go teams in the business, with autonomy and exposure to industry leaders on huge household brand names. We're always encouraging internal development and you'll have access to loads of learning opportunities, events and conferences to build your industry knowledge.