Hybrid InfoSec Third-Party Assurance Analyst

Centrica; Windsor; Hybrid; GBP 60,000 - 82,000; Full time

Benefits offered by this job

15% Employee Energy Allowance

Pension plan

Healthcare – fully funded

25 days holiday (+ public holidays) +

Flexible benefits: car leases, travel…

Travel insurance

Job summary

Centrica is seeking an Information Security Third Party Assurance Analyst to safeguard the company, customers, and colleagues by ensuring suppliers meet security, privacy and compliance standards. You will support onboarding, due diligence, reassessments and ongoing assurance across the supplier lifecycle, identifying risks and guiding remediation with stakeholders.

UK-based hybrid role with occasional site travel.

Qualifications

• Experience in Information Security, Cyber Security, Risk, Compliance or Assurance, with a good understanding of how to balance strong controls with practical business needs.

Responsibilities

• Operate the third-party security assessment process for procurement and business requests, making supplier assurance clear, consistent and easy to navigate.
• Conduct supplier due diligence assessments by reviewing supplier responses, evidence, assurance reports and supporting documentation against Centrica’s information security, privacy, risk and contractual requirements.
• Identify, assess and document third-party security, privacy and technology risks, including control gaps, deviations, concessions and remediation actions.
• Support supplier onboarding, reassessment and ongoing assurance activity across the supplier lifecycle, with a focus on critical and high-risk suppliers and a strong eye on emerging cyber threats and good practice.
• Produce clear, evidence-based risk assessments, reports and recommendations that support business owners, governance forums and risk-based decision making.
• Build strong relationships with Procurement, Legal, Privacy, Information Security, Technology GRC, Service Owners, Project Delivery Teams and suppliers, while helping improve assurance processes, documentation and standards.

Skills

Information Security

Cyber Security

Risk

Compliance

Assurance

Tools

Risk Ledger

Workiva

ServiceNow

Job description

Centrica is seeking an Information Security Third Party Assurance Analyst to safeguard the company, customers, and colleagues by ensuring suppliers meet security, privacy and compliance standards. You will support onboarding, due diligence, reassessments and ongoing assurance across the supplier lifecycle, identifying risks and guiding remediation with stakeholders.

UK-based hybrid role with occasional site travel.