Senior Third-Party Security Analyst - Remote

The Nippon Telegraph and Telephone Corporation (NTT); City Of London; Remote; GBP 70,000 - 95,000; Full time

Job summary

The Nippon Telegraph and Telephone Corporation (NTT) UK arm is seeking a Senior Security Analyst for Third-Party Security Assurance (TPSA). You will evaluate, monitor and manage security, privacy, operational, and compliance risks across third-party entities in a complex multi-entity environment.

You will collaborate with Legal, Procurement, Privacy and Compliance; leverage GRC tools like OneTrust and Drata; build dashboards in Power BI; and support governance forums and risk reviews to ensure

Qualifications

• Minimum 3 years' experience in Information Security, cyber risk management, or GRC.
• Experience with third-party security risk programmes in large enterprises.
• Experience across UK and EU jurisdictions.
• Experience reviewing supplier security assessments, due diligence questionnaires, audit reports and evidence.
• Experience supporting security and risk activities related to mergers and acquisitions.

Responsibilities

• Collaborate with Legal, Procurement, Privacy, and Compliance.
• Provide risk-based insights to stakeholders and support decision-making.
• Support audit, regulatory and customer assurance requirements.
• Manage TPSA activities using GRC platforms (OneTrust, Drata, Swiss GRC).
• Develop dashboards using Power BI and SharePoint.
• Support governance forums and risk review meetings.
• Ensure adherence to TPSA tiering models, standards, and processes.

Skills

Information Security

Third-Party Risk

GRC

Regulatory Awareness

Tools

OneTrust

Drata

Swiss GRC

Power BI

Job description

The Nippon Telegraph and Telephone Corporation (NTT) UK arm is seeking a Senior Security Analyst for Third-Party Security Assurance (TPSA). You will evaluate, monitor and manage security, privacy, operational, and compliance risks across third-party entities in a complex multi-entity environment.

You will collaborate with Legal, Procurement, Privacy and Compliance; leverage GRC tools like OneTrust and Drata; build dashboards in Power BI; and support governance forums and risk reviews to ensure