Senior Manager - Third Party Assurance FTC

Lorien; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading global law firm in the City of London is seeking a Senior Manager for Third Party Assurance on a fixed-term contract. This role entails leading the development and implementation of a robust Supplier Assurance model, ensuring compliance with ISO 27001 and managing audit processes. Strong leadership experience in information security, particularly in legal or financial services, is essential for success. The position offers an opportunity to collaborate with senior stakeholders and drive significant improvements.

Qualifications

• Experience in Third-Party Assurance roles in medium to large organizations.
• Broad understanding of security domains: Ops, GRC, Identity.
• Ability to deliver in fast-paced environments.

Responsibilities

• Lead the Supplier Assurance Security Model.
• Produce management information for CISO.
• Run governance forums for Supplier Assurance.
• Maintain Third-Party Security Schedule.
• Edit security clauses in contracts.
• Provide ISO 27001 audit evidence.

Skills

Leadership in Information Security

Stakeholder Management

Negotiation Skills

Communication Skills

Deadline Management

Education

CISSP certification

CISM certification

ISO 27001 certification

Job description

Senior Manager – Third Party Assurance FTC

Job Type: Contract/Temporary

Location: City of London, London

Negotiable: Negotiable

Job Ref: BBBH171120_1764774159

Date Added: December 3rd, 2025

Consultant: Heather Thompson

Info sec manager – Third Assurance – 12‑Month FTC

Fixed term contract duration: 12month (annual salary)

A global law and professional service firm is seeking an experienced Information Security professional to lead and embed a robust Supplier/Third‑Party Assurance model, ensuring the firm maintains and evidences controls for ISO 27001 and client audits. You'll report into the Senior Security Manager, collaborate with stakeholders across Security Operations, GRC and Identity, and contribute to globally consistent practices.

Responsibilities

• Own & champion the Supplier Assurance Security Model, working closely with senior security leadership.
• Produce MI for the CISO (trends, process gaps, recommendations) to drive continuous improvement.
• Run governance forums for Supplier Assurance and track actions to closure.
• Maintain the Third‑Party Security Schedule and support supplier negotiations on security requirements.
• Edit/agree straightforward security clauses in contracts to ensure robustness.
• Provide audit evidence to support ISO 27001 certification from a supplier assurance perspective.

Requirements

• Solid experience in Leadership Information Security Supplier/Third‑Party Assurance roles.
• Background in legal or financial services environments (medium to large organisations).
• Broad understanding across security domains (Ops, GRC, Identity, third‑party security).
• Desirable: CISSP, CISM, ISO 27001 certifications.
• Strong stakeholder management, negotiation, and written/verbal communication skills.
• Proven ability to prioritise and deliver to deadlines in a fast‑paced environment.

If you're interested in supporting a global law firm's security. Please apply with an updated CV to get the conversation rolling.