Third Party Cyber Assurance Analyst

Intact Insurance; Horsham; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Annual incentive

Hybrid working

25 days annual leave

Flexible benefits

Share options

Career development

Inclusive culture

Job summary

Intact Insurance in the United Kingdom seeks a skilled professional to manage the end-to-end Cyber Third-Party Assurance lifecycle, conducting risk assessments and reviewing security documentation to ensure secure-by-design outcomes.

You will deploy BitSight across critical third parties, track risks, and report to Risk Committees, collaborating with Line 1–3 to enhance assurance maturity and risk culture.

Qualifications

• Working knowledge of third-party cyber assurance.
• Familiar with third-party tooling such as BitSight and OneTrust.
• Good communication and stakeholder management skills.
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC).
• Strong cyber control-domain knowledge (IAM, vulnerability management, logging, resilience).
• Understanding of third-party risk management and cyber security principles.
• Experience conducting third-party cyber risk assessments.
• Ability to translate technical risk into business impact.
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• Good analytical skills and ability to evaluate detailed data and risks.
• Typically 3 to 5 years of experience with frameworks, tooling, and risk management to enhance third party cyber assurance capability.

Responsibilities

• Manage end-to-end Cyber Third-Party Assurance lifecycle.
• Assist in conducting third-party cyber risk assessments and produce secure-by-design outputs.
• Review third-party security documentation (SOC2, ISO certs, pentests).
• Support deployment and ongoing assessment of BitSight across high-risk third parties.
• Identify, track, and mitigate third-party cyber risks; monitor risk exposure.
• Provide Third-Party reporting for Risk Committees (CIO RCC) and Enterprise risk posture.
• Partner with Risk across Line 1–3 to improve risk culture and assurance maturity.

Skills

Third-party cyber assurance

Stakeholder management

Regulatory knowledge (DPA/GDPR, FCA, O

Analytical skills

Risk assessment

Translate risk to business impact

Experience (3–5 years)

Cyber controls knowledge (IAM, vuln mg

Tools

BitSight

OneTrust

Job description

You'll make an impact by:

• Supporting the management of the end-to-end Cyber Third-Party Assurance life-cycle process.
• Assists in conducting Third-Party Cyber Risk Assurance assessments delivering outcomes that are secure by design and within Cyber Risk appetite.
• Reviewing third-party security documentation (e.g., third-party questionnaires, SOC2 Type II reports, ISO certifications, penetration tests).
• Proactively pursuing improvements in processes, tools, and resources.
• Assisting in the deployment and ongoing assessment of the BitSight tool across our Critical, High, and Medium rated Third Parties, providing real-time insights into their risk posture.
• Identifying, assessing, tracking, and mitigating third-party cyber risks, while maintaining a view of third-party cyber risk exposure.
• Supporting the Risk, Compliance and Governance Manager with Third-Party reporting, including, at times, generation of material in preparation for various Risk Committees such as the CIO Risk and Control committee (CIO RCC). Reporting will contribute towards Enterprise Risk and Board Risk reports.
• Risk Partnering with colleagues at all levels of the organisation across Line 1 on all Third-Party Cyber Risk related matters - including improving the Risk culture.
• Working as required with Line 2 on Assurance activity and collaboratively with Line 3 through the standard Audit lifecycle. Managing risks and issues to formal resolution.

Your skills and experience:

• Working knowledge of third-party cyber assurance
• Familiar with Third Party tooling - BitSight, OneTrust etc.
• Good communication and stakeholder management skills
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC,)
• Good all-round Cyber control-domain knowledge (IAM, vuln mgmt., logging, resilience)
• Understanding of third-party risk management and cyber security principles.
• Experience conducting third party cyber risk assessments.
• Ability to translate technical risk into business impact.
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• Good analytical skills and ability to evaluate detailed data and risks.
• Typically brings 3 to 5 years of experience with ability to apply frameworks, tooling, and risk management to enhance third party cyber assurance capability.

Win as a Team

Intact Insurance is a leading provider of Commercial and Specialty insurance solutions for businesses of all sizes across the UK and Ireland and through its Global Network in over 150 countries worldwide. Intact Insurance is part ofIntact Financial Corporation, the largest provider of Property and Casualty insurance in Canada and a leading Specialty lines insurer with international expertise. We aim to deliver second-to-none service and help brokers and businesses thrive in a fast-moving world.

Shape the future

We're leading a transformation in insurance helping people, businesses and society prosper in good times and be resilient in bad times. When you join us, you're not just taking a job - you're stepping into a career where you can make a real difference.

Grow with us

We're customer-driven, community-focused, and committed to helping our people grow. Whether you're early in your journey or bringing years of experience, we'll support you with the tools, flexibility, and opportunities to thrive while going the extra mile for customers, brokers and colleagues.

Why you'll love it here

Being part of our team means you'll have the support and freedom to bring your best self to work each day. Here's a flavour of what you can look forward to:

• Annual discretionary incentive plan
• Hybrid working (with 60% of your time office-based)
• 25 days annual leave plus bank holidays and buy/sell options
• Flexible benefit options including financial and health wellbeing
• Share investment options
• Career development and mentoring
• Inclusive culture and employee networks

More benefit information here.

As an equal opportunity employer, we ensure fair consideration for all applicants and offer interviews to all disabled candidates who meet the essential criteria.

We understand that everyone's circumstances are different and are happy to explore flexible working options - such as reduced hours or job shares to support work-life balance.

If you meet the core criteria but not every requirement, we'd still love to hear from you. Let's explore how this role could support your next career step. If you need adjustments during the recruitment process, just let us know - we are here to support you.

Our DEI commitment

We celebrate individuality and believe our differences make us stronger. We're proud to foster a culture where everyone feels respected, valued, and empowered to thrive.