Hybrid Security Assurance Analyst

Hackajob Ltd; Chesterton; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Hybrid working

Private health insurance

Wellbeing allowance

Job summary

Redgate in Cambridge is seeking a Security Assurance Analyst to manage customer security questionnaires and vendor due diligence. You will coordinate with Sales, Product, Procurement, and Legal to drive assurance activities and build a central evidence repository for efficiency.

As you develop technical security expertise, there is potential to progress toward API reviews while maintaining strong communication with non-technical stakeholders.

Qualifications

• Experience in security, compliance, vendor risk or customer assurance roles.
• Experience coordinating customer security questionnaires (e.g., SIG, CAIQ, VSAQ).
• Working knowledge of information security/privacy frameworks (ISO 27001, SOC 2, NIST, GDPR).
• Ability to translate product workings into security requirements and risks.
• Strong written and verbal communication for non-technical audiences.
• Excellent organisational skills to manage multiple deadlines and assess supplier documentation.

Responsibilities

• Manage the full lifecycle of customer security questionnaires and vendor due diligence.
• Collaborate with Sales, Product, Procurement, and Legal on assurance activities.
• Build a central repository of responses and evidence for faster future reviews.
• Develop evidence and relationships to strengthen customer trust in data handling.
• Assess vendor risk and provide judgement informing Procurement, Legal and business decisions.
• Develop technical security knowledge with potential progression to integration and API reviews.

Skills

Security

Vendor risk

Compliance

Customer assurance

Communication

Tools

ISO 27001

SOC 2

NIST

GDPR

Job description

Redgate in Cambridge is seeking a Security Assurance Analyst to manage customer security questionnaires and vendor due diligence. You will coordinate with Sales, Product, Procurement, and Legal to drive assurance activities and build a central evidence repository for efficiency.

As you develop technical security expertise, there is potential to progress toward API reviews while maintaining strong communication with non-technical stakeholders.