Security Assurance Analyst — Hybrid + Career Growth

Redgate Software, Inc; Cambridge; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Hybrid work

Wellbeing allowance

Paid time off

Learning & development

Private health insurance

Job summary

Redgate Software, Inc. is seeking an experienced Security Assurance Lead to own the end-to-end vendor risk program.

You’ll manage customer security questionnaires (SIG, CAIQ, VSAQ) and lead due diligence with Sales, Product, Procurement and Legal to build robust evidence packages and trusted supplier relationships. You’ll translate security requirements into practical guidance for our products and infrastructure, communicate risks clearly to non-technical stakeholders, and contribute to maturing

Qualifications

• Experience in security, compliance, vendor risk, or customer assurance roles.
• Experience coordinating customer security questionnaires (SIG, CAIQ, or VSAQ) or similar assessments.
• Working knowledge of at least one information security/privacy framework (ISO 27001, SOC 2, NIST, GDPR).
• Ability to translate security requirements and risks into product guidance and supplier expectations.
• Strong written and verbal communication with non-technical stakeholders.
• Excellent organisational skills and risk judgement from supplier documentation.

Responsibilities

• Lead end-to-end vendor risk program and customer security questionnaires.
• Coordinate with Sales, Product, Procurement and Legal to compile evidence and responses.
• Shape a central repository of responses and evidence to speed future reviews.
• Work with Security Manager and Cyber Security Engineer toward more technical security duties such as API reviews.

Skills

Security risk mgmt

Vendor risk mgmt

Questionnaires (SIG/CAIQ/VSAQ)

Security framework knowledge

Communication

Job description

Redgate Software, Inc. is seeking an experienced Security Assurance Lead to own the end-to-end vendor risk program.

You’ll manage customer security questionnaires (SIG, CAIQ, VSAQ) and lead due diligence with Sales, Product, Procurement and Legal to build robust evidence packages and trusted supplier relationships. You’ll translate security requirements into practical guidance for our products and infrastructure, communicate risks clearly to non-technical stakeholders, and contribute to maturing