Third Party Cyber Assurance Analyst

Intact Insurance UK; Horsham; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Annual discretionary incentive plan

Hybrid working (60% office-based)

25 days annual leave + holidays

Flexible benefits including financial/

Share investment options

Career development and mentoring

Inclusive culture and employee nets

Job summary

Intact Insurance UK is seeking a dedicated Cyber Third-Party Assurance professional to support the end-to-end lifecycle of third-party risk management. You will assist in conducting cyber risk assessments, review security documentation, and help deploy BitSight across rated partners to maintain secure posture.

You will work with Risk, Compliance and Governance teams, translate technical risk into business impact, and ensure regulatory alignment (DPA/GDPR, FCA, PCI DSS) while continuously

Qualifications

• Working knowledge of third-party cyber assurance.
• Familiar with third party tooling such as BitSight and OneTrust.
• Good communication and stakeholder management skills.
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC).
• Good all-round cyber control-domain knowledge (IAM, vuln mgmt., logging, resilience).
• Understanding of third-party risk management and cyber security principles.
• Experience conducting third party cyber risk assessments.
• Ability to translate technical risk into business impact.
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• Good analytical skills and ability to evaluate detailed data and risks.
• Typically brings 3 to 5 years of experience with ability to apply frameworks, tooling, and risk management to enhance third party cyber assurance capability.

Responsibilities

• Support end-to-end Cyber Third-Party Assurance lifecycle management.
• Assist in conducting third-party cyber risk assessments and deliver secure-by-design outcomes.
• Review third-party security documentation (SOC2 Type II, ISO certifications, penetration tests).
• Proactively pursue improvements in processes, tools, and resources.
• Assist deployment and ongoing assessment of BitSight across rated Third Parties.

Skills

Third-party cyber assurance

Stakeholder management

Regulatory awareness

Risk assessment

Translate risk to business impact

Cyber governance

Tools

BitSight

OneTrust

Job description

You'll make an impact by:

• Supporting the management of the end-to-end Cyber Third-Party Assurance life-cycle process.
• Assists in conducting Third-Party Cyber Risk Assurance assessments delivering outcomes that are secure by design and within Cyber Risk appetite.
• Reviewing third-party security documentation (e.g., third-party questionnaires, SOC2 Type II reports, ISO certifications, penetration tests).
• Proactively pursuing improvements in processes, tools, and resources.
• Assisting in the deployment and ongoing assessment of the BitSight tool across our Critical, High, and Medium rated Third Parties, providing real-time insights into their risk posture.
• Identifying, assessing, tracking, and mitigating third-party cyber risks, while maintaining a view of third-party cyber risk exposure.
• Supportingthe Risk, Compliance and Governance Manager with Third-Party reporting, including, at times, generation of material in preparation for various Risk Committees such as the CIO Risk and Control committee (CIO RCC). Reporting will contribute towards Enterprise Risk and Board Risk reports.
• Risk Partnering with colleagues at all levels of the organisation across Line 1 on all Third-Party Cyber Risk related matters – including improving the Risk culture.
• Working as required with Line 2 on Assurance activity and collaboratively with Line 3 through the standard Audit lifecycle. Managing risks and issues to formal resolution.

Your skills and experience:

• Working knowledge of third-party cyber assurance
• Familiar with Third Party tooling - BitSight, OneTrust etc.
• Good communication and stakeholder management skills
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC,)
• Good all-round Cyber control-domain knowledge (IAM, vuln mgmt., logging, resilience)
• Understanding of third-party risk management and cyber security principles.
• Experience conducting third party cyber risk assessments.
• Ability to translate technical risk into business impact.
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• Good analytical skills and ability to evaluate detailed data and risks.Typically brings 3 to 5 years of experience with ability to apply frameworks, tooling, and risk management to enhance third party cyber assurance capability.

Win as a Team

Intact Insurance is a leading provider of Commercial and Specialty insurance solutions for businesses of all sizes across the UK and Ireland and through its Global Network in over 150 countries worldwide. Intact Insurance is part of Intact Financial Corporation, the largest provider of Property and Casualty insurance in Canada and a leading Specialty lines insurer with international expertise. We aim to deliver second-to-none service and help brokers and businesses thrive in a fast-moving world.

Shape the future

We're leading a transformation in insurance helping people, businesses and society prosper in good times and be resilient in bad times. When you join us, you're not just taking a job – you're stepping into a career where you can make a real difference.

Grow with us

We're customer-driven, community-focused, and committed to helping our people grow. Whether you're early in your journey or bringing years of experience, we'll support you with the tools, flexibility, and opportunities to thrive while going the extra mile for customers, brokers and colleagues.

Why you'll love it here

Being part of our team means you'll have the support and freedom to bring your best self to work each day. Here's a flavour of what you can look forward to:

• Annual discretionary incentive plan
• Hybrid working (with 60% of your time office-based)
• 25 days annual leave plus bank holidays and buy/sell options
• Flexible benefit options including financial and health wellbeing
• Share investment options
• Career development and mentoring
• Inclusive culture and employee networks

More benefit information here.

Our DEI commitment

We celebrate individuality and believe our differences make us stronger. We're proud to foster a culture where everyone feels respected, valued, and empowered to thrive.

As an equal opportunity employer, we ensure fair consideration for all applicants and offer interviews to all disabled candidates who meet the essential criteria.

We understand that everyone's circumstances are different and are happy to explore flexible working options—such as reduced hours or job shares to support work–life balance.