Security Assurance Analyst — Vendor & Customer Trust

Redgate Software; Cambridge; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Hybrid work

Wellbeing allowance

Career development

Private health insurance

Job summary

Redgate Software, based in Cambridge, is hiring a Security Assurance Specialist to drive customer and supplier security diligence. You will build evidence and coordinate due diligence to ensure data handling meets Redgate's standards.

You will work with Sales, Product, Procurement and Legal to complete questionnaires (SIG, CAIQ, VSAQ) and develop a central repository of responses for faster reviews.

Qualifications

• Experience in security, compliance, vendor risk, or customer assurance.
• Experience completing or coordinating customer security questionnaires (SIG, CAIQ, or VSAQ) or equivalent.
• Knowledge of information security/privacy frameworks (ISO 27001, SOC 2, NIST, GDPR).
• Ability to translate product work into security requirements and risks.
• Strong written and verbal communication with attention to detail.

Responsibilities

• Cover the full lifecycle of customer security questionnaires and vendor due diligence with Sales, Product, Procurement and Legal.
• Shape assurance processes, including a central repository of responses and evidence for faster reviews.
• Collaborate with the Security Manager and Cyber Security Engineer toward more technical duties such as integration and API reviews.
• Exercise judgement on vendor risk that influences decisions in Procurement, Legal, and the wider business.

Skills

Security risk management

Regulatory/compliance expertise

Vendor risk assessment

Security questionnaires

Communication & documentation

Job description

Redgate Software, based in Cambridge, is hiring a Security Assurance Specialist to drive customer and supplier security diligence. You will build evidence and coordinate due diligence to ensure data handling meets Redgate's standards.

You will work with Sales, Product, Procurement and Legal to complete questionnaires (SIG, CAIQ, VSAQ) and develop a central repository of responses for faster reviews.