Cyber Third-Party Assurance Analyst – Flexible Work

Intact Insurance; United Kingdom; Remote; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Annual discretionary bonus

11% pension contributions

25 days annual leave + bank holidays +

buy/sell options

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance is seeking a dedicated professional to support its Cyber Third-Party Assurance lifecycle, helping assess and secure third-party relationships. You will review documentation, coordinate risk activities, and contribute to security-by-design outcomes.

This role will collaborate with stakeholders across the business and security teams, applying rigorous analysis and industry best practices to manage risk and enable resilient operations.

Qualifications

• Knowledge across third-party cyber risk management methodologies and practices.
• Analytical and problem-solving capabilities for risk examples and insights.
• Strong communication and collaboration with stakeholders and senior leaders.
• Ability to work independently while seeking support when needed.

Responsibilities

• Support end-to-end Cyber Third-Party Assurance lifecycle.
• Assist in third-party cyber risk assessments to ensure security by design.
• Review third-party security documentation (SOC2, ISO, penetration tests).
• Drive process/tool improvements and resource optimization.
• Assist deployment and ongoing assessment of BitSight across rated parties.

Skills

Third-Party Cyber Risk

Cyber risk assessments

SOC2 Type II

ISO certifications

BitSight knowledge

Tools

SOC2 Reports

Penetration tests

Job description

Intact Insurance is seeking a dedicated professional to support its Cyber Third-Party Assurance lifecycle, helping assess and secure third-party relationships. You will review documentation, coordinate risk activities, and contribute to security-by-design outcomes.

This role will collaborate with stakeholders across the business and security teams, applying rigorous analysis and industry best practices to manage risk and enable resilient operations.