IT Third Party Security Manager

Euroclear; United Kingdom; On-site; GBP 60,000 - 80,000; Full time

Job summary

A financial services firm in the United Kingdom is seeking an IT Third Party Security Manager to manage third-party security processes and ensure compliance with regulatory expectations. This role involves overseeing contract management, ongoing monitoring, and leading improvements within the third-party assurance lifecycle. Ideal candidates will have strong knowledge of security frameworks and experience in strategic leadership.

Qualifications

• Strong knowledge of ecosystems and third-party management.
• Experience in security risk management and control frameworks.
• Familiarity with relevant regulations and financial markets.

Responsibilities

• Ensure security expectations match risk profiles during contract management.
• Conduct security checks at contract end during exit management.
• Support response to third-party alerts and incidents through ongoing monitoring.

Skills

Ecosystems knowledge

Third-party management

Security risk management

Control frameworks (ISO 27000, NIST, CIS-18, COBIT-5)

Regulatory knowledge (DORA, ESMA)

Experience with monitoring frameworks (e.g., SWIFT CSP)

Vendor due diligence

IT Security Certifications (CISSP, CISM)

Tools

ServiceNow GRC

Job description

Social network you want to login/join with:

IT Third Party Security Manager, United Kingdom

Client: Euroclear

Location: United Kingdom

Job Category: Other

-

EU work permit required: Yes

Job Reference:

9ed149e40257

Job Views:

26

Posted:

12.08.2025

Expiry Date:

26.09.2025

Job Description:

Division: Chief Information Security Office (CISO)

Role: Third Party Security Manager

The IT and Cyber Risk Team within CISO provides services to:

• Manage risks by identifying IT, information security, or cyber risks
• Remediate root cause issues and risks with sustainable controls
• Align risk exposure with the firm’s risk appetite
• Ensure regulatory compliance
• Embed accountability, ownership, and risk culture within the first line

Within the Enterprise Risk Management framework, the team maintains a strong control environment to identify, assess, monitor, and mitigate risks continually.

Role Responsibilities:

Third-Party Assurance Lifecycle

• Contract Management: Ensure security expectations match risk profiles
• Exit Management: Conduct security checks at contract end
• Ongoing Monitoring: Support response to third-party alerts and incidents

Continuous Improvements

• Support regulatory changes like DORA
• Design and implement process improvements
• Lead demand capacity management
• Deliver training and coaching
• Enhance third-party security knowledge and communication

Core Skills

• Knowledge of ecosystems, third-party management, security risk management, control frameworks (ISO 27000, NIST, CIS-18, COBIT-5), relevant regulations (DORA, ESMA)
• Experience with logging, monitoring, alerting, and frameworks like SWIFT CSP
• Understanding of financial markets, FMIs, CSD operations (advantages)
• Experience with vendor due diligence, contract reviews, and tools like ServiceNow GRC
• IT Security Certifications (e.g., CISSP, CISM) are advantageous

Soft Skills

• Leadership: strategic direction, business acumen, results-driven
• Interpersonal: proactive, innovative, adaptable, calm under pressure
• Collaborative: effective with stakeholders and team members