Third Party Cyber Assurance Analyst

Intact Insurance (previously RSA); Horsham; Hybride; GBP 50 000 - 75 000; Plein temps

Avantages offerts par ce poste

Annual incentive plan

Hybrid working

25 days annual leave

Flexible benefits

Share options

Career development

Résumé du poste

Intact Insurance is seeking a professional to support the end-to-end Cyber Third-Party Assurance lifecycle and assist in risk assessments across our UK/Cross-border operations. You will review third-party security documentation and contribute to tooling improvements to strengthen risk posture.

The role requires experience with cyber risk, regulatory awareness, and the ability to translate technical risk into business impact. Hybrid working and a focus on governance are core elements.

Qualifications

• Working knowledge of third-party cyber assurance.
• Familiar with third-party tooling such as BitSight and OneTrust.
• Good communication and stakeholder management skills.
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC).
• Strong knowledge of cyber control domains (IAM, vuln mgmt., logging, resilience).
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• 3–5 years of experience applying frameworks, tooling and risk management to third-party cyber assurance.

Responsabilités

• Support end-to-end Cyber Third-Party Assurance lifecycle management.
• Assist in Third-Party Cyber Risk Assurance assessments to deliver secure-by-design outcomes.
• Review third-party security documents (SOC2 Type II, ISO certifications, penetration tests).
• Contribute to process, tooling and resource improvements.
• Assist deployment and ongoing assessment of BitSight across Critical, High, and Medium third parties.

Connaissances

Third-party cyber assurance

Stakeholder management

Cyber certifications

Regulatory awareness

Risk translation

GDPR/Regulatory knowledge

Analytical skills

Outils

BitSight

OneTrust

Description du poste

You'll make an impact by:

• Supporting the management of the end-to-end Cyber Third-Party Assurance life-cycle process.
• Assists in conducting Third-Party Cyber Risk Assurance assessments delivering outcomes that are secure by design and within Cyber Risk appetite.
• Reviewing third-party security documentation (e.g., third-party questionnaires, SOC2 Type II reports, ISO certifications, penetration tests).
• Proactively pursuing improvements in processes, tools, and resources.
• Assisting in the deployment and ongoing assessment of the BitSight tool across our Critical, High, and Medium rated Third Parties, providing real-time insights into their risk posture.
• Identifying, assessing, tracking, and mitigating third-party cyber risks, while maintaining a view of third-party cyber risk exposure.
• Supporting the Risk, Compliance and Governance Manager with Third-Party reporting, including, at times, generation of material in preparation for various Risk Committees such as the CIO Risk and Control committee (CIO RCC). Reporting will contribute towards Enterprise Risk and Board Risk reports.
• Risk Partnering with colleagues at all levels of the organisation across Line 1 on all Third-Party Cyber Risk related matters - including improving the Risk culture.
• Working as required with Line 2 on Assurance activity and collaboratively with Line 3 through the standard Audit lifecycle. Managing risks and issues to formal resolution.

Your skills and experience:

• Working knowledge of third-party cyber assurance
• Familiar with Third Party tooling - BitSight, OneTrust etc.
• Good communication and stakeholder management skills
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC,)
• Good all-round Cyber control-domain knowledge (IAM, vuln mgmt., logging, resilience)
• Understanding of third-party risk management and cyber security principles.
• Experience conducting third party cyber risk assessments.
• Ability to translate technical risk into business impact.
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• Good analytical skills and ability to evaluate detailed data and risks.
• Typically brings 3 to 5 years of experience with ability to apply frameworks, tooling, and risk management to enhance third party cyber assurance capability.

Win as a Team

Intact Insurance is a leading provider of Commercial and Specialty insurance solutions for businesses of all sizes across the UK and Ireland and through its Global Network in over 150 countries worldwide. Intact Insurance is part ofIntact Financial Corporation, the largest provider of Property and Casualty insurance in Canada and a leading Specialty lines insurer with international expertise. We aim to deliver second-to-none service and help brokers and businesses thrive in a fast-moving world.

Shape the future

We're leading a transformation in insurance helping people, businesses and society prosper in good times and be resilient in bad times. When you join us, you're not just taking a job - you're stepping into a career where you can make a real difference.

Grow with us

We're customer-driven, community-focused, and committed to helping our people grow. Whether you're early in your journey or bringing years of experience, we'll support you with the tools, flexibility, and opportunities to thrive while going the extra mile for customers, brokers and colleagues.

Why you'll love it here

Being part of our team means you'll have the support and freedom to bring your best self to work each day. Here's a flavour of what you can look forward to:

• Annual discretionary incentive plan
• Hybrid working (with 60% of your time office-based)
• 25 days annual leave plus bank holidays and buy/sell options
• Flexible benefit options including financial and health wellbeing
• Share investment options
• Career development and mentoring
• Inclusive culture and employee networks

More benefit information here.

As an equal opportunity employer, we ensure fair consideration for all applicants and offer interviews to all disabled candidates who meet the essential criteria.

We understand that everyone's circumstances are different and are happy to explore flexible working options - such as reduced hours or job shares to support work-life balance.

If you meet the core criteria but not every requirement, we'd still love to hear from you. Let's explore how this role could support your next career step. If you need adjustments during the recruitment process, just let us know - we are here to support you.

Our DEI commitment

We celebrate individuality and believe our differences make us stronger. We're proud to foster a culture where everyone feels respected, valued, and empowered to thrive.