InfoSec Third Party Assurance Specialist

TN United Kingdom; London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading company in technology is seeking an InfoSec Third Party Assurance Specialist in London. The role involves conducting cyber risk assessments of third-party vendors, ensuring adherence to security policies, and managing risks effectively. Ideal candidates will have experience in risk management and knowledge of information security standards. Join a diverse team committed to innovation and security.

Qualifications

• 3–5 years of experience in third-party/vendor risk management.
• Strong knowledge of ISO/IEC 27001, SOC 2, NIST CSF.
• Experience conducting vendor risk assessments.

Responsibilities

• Conduct security risk assessments on third-party vendors.
• Maintain TPRM documentation aligned with security standards.
• Track and manage third-party risks through to remediation.

Skills

Risk Management

Information Security

Compliance

Education

CISA

CRISC

CISSP

Tools

GRC Platforms

Job description

Social network you want to login/join with:

InfoSec Third Party Assurance Specialist, London

Client:

Location:

London, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Reference:

7a70731f8638

Job Views:

3

Posted:

15.05.2025

Expiry Date:

29.06.2025

Job Description:

Sport connects us—across borders, time zones, and cultures. At Sportradar, we use that connection to drive technology forward. Our Information Security Governance, Risk, and Compliance (GRC) team is essential in safeguarding the integrity and resilience of our operations.

We are seeking an InfoSec Third Party Assurance Specialist to help conduct cyber risk assessments of third-party technology suppliers, ensure compliance with security policies, and support risk identification and recording. If you’re passionate about securing vendor relationships and enabling secure business growth, this role is for you.

KEY RESPONSIBILITIES:

• Perform security risk assessments on third-party vendors, review SOC reports, and evaluate controls.
• Maintain and improve TPRM documentation, including policies, workflows, and assessment templates aligned with ISO/IEC 27001, NIST, and other standards.
• Manage third-party risks through to remediation, collaborating with vendors and internal teams.
• Support the ISMS and participate in internal risk, compliance, and audit activities.
• Contribute to governance initiatives, regulatory compliance, awareness campaigns, and risk assessments.
• Assist GRC team with reporting, metrics, and stakeholder communication.

REQUIRED SKILLS AND EXPERIENCE:

• 3–5 years in third-party/vendor risk management, preferably in security, risk, or compliance teams.
• Knowledge of security standards like ISO/IEC 27001, SOC 2, NIST CSF, or SIG.
• Understanding of technology systems and security controls.
• Experience reviewing SOC 2 reports and security questionnaires.
• Familiarity with GRC tools for risk management.
• Knowledge of contractual/regulatory requirements such as GDPR, DORA.
• Bonus: Experience with ISMS or Business Continuity Management.
• Certifications like CISA, CRISC, CISSP are preferred.

Additional Information

At Sportradar, we celebrate diversity and are committed to equal opportunity. We welcome applicants who are eager to learn and grow with us, even if they meet most but not all requirements.