Security Assurance Analyst — Vendor Risk & Assessments

RED GATE STORAGE; Cambridge; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Hybrid working (home & Cambridge)

Monthly wellbeing allowance

Career development & training

Private health insurance

Job summary

Redgate is seeking a Security Assurance Specialist to drive due diligence on suppliers and manage customer security questionnaires. You will build the evidence base, coordinate with Sales, Product, Procurement and Legal, and shape how assurance work is done.

You will work with the Security Manager and Cyber Security Engineer to expand technical security responsibilities and influence procurement decisions with sound risk judgments.

Qualifications

• Experience in security, compliance, vendor risk, or customer assurance roles.
• Experience completing or coordinating customer security questionnaires (SIG, CAIQ, or VSAQ) or similar assessments.
• Working knowledge of information security/privacy frameworks (ISO 27001, SOC 2, NIST, GDPR).
• Ability to translate product security requirements and risks.
• Strong written and verbal communication with non-technical audiences.
• Excellent organisational skills and risk judgment from supplier documentation.

Responsibilities

• Lead the full lifecycle of customer security questionnaires and vendor due diligence with Sales, Product, Procurement and Legal.
• Shape assurance work processes, including a central repository of responses and evidence.
• Collaborate with Security Manager and Cyber Security Engineer to grow technical security responsibilities.
• Influence procurement, legal and wider business decisions through sound vendor risk assessment.

Skills

Security risk management

Vendor due diligence

Customer assurance

Documentation & communication

Framework familiarity

Job description

Redgate is seeking a Security Assurance Specialist to drive due diligence on suppliers and manage customer security questionnaires. You will build the evidence base, coordinate with Sales, Product, Procurement and Legal, and shape how assurance work is done.

You will work with the Security Manager and Cyber Security Engineer to expand technical security responsibilities and influence procurement decisions with sound risk judgments.