Third-Party Cyber Risk Assurance Specialist

Intact Insurance; Horsham; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Annual incentive

Hybrid working

25 days annual leave

Flexible benefits

Share options

Career development

Inclusive culture

Job summary

Intact Insurance in the United Kingdom seeks a skilled professional to manage the end-to-end Cyber Third-Party Assurance lifecycle, conducting risk assessments and reviewing security documentation to ensure secure-by-design outcomes.

You will deploy BitSight across critical third parties, track risks, and report to Risk Committees, collaborating with Line 1–3 to enhance assurance maturity and risk culture.

Qualifications

• Working knowledge of third-party cyber assurance.
• Familiar with third-party tooling such as BitSight and OneTrust.
• Good communication and stakeholder management skills.
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC).
• Strong cyber control-domain knowledge (IAM, vulnerability management, logging, resilience).
• Understanding of third-party risk management and cyber security principles.
• Experience conducting third-party cyber risk assessments.
• Ability to translate technical risk into business impact.
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• Good analytical skills and ability to evaluate detailed data and risks.
• Typically 3 to 5 years of experience with frameworks, tooling, and risk management to enhance third party cyber assurance capability.

Responsibilities

• Manage end-to-end Cyber Third-Party Assurance lifecycle.
• Assist in conducting third-party cyber risk assessments and produce secure-by-design outputs.
• Review third-party security documentation (SOC2, ISO certs, pentests).
• Support deployment and ongoing assessment of BitSight across high-risk third parties.
• Identify, track, and mitigate third-party cyber risks; monitor risk exposure.
• Provide Third-Party reporting for Risk Committees (CIO RCC) and Enterprise risk posture.
• Partner with Risk across Line 1–3 to improve risk culture and assurance maturity.

Skills

Third-party cyber assurance

Stakeholder management

Regulatory knowledge (DPA/GDPR, FCA, O

Analytical skills

Risk assessment

Translate risk to business impact

Experience (3–5 years)

Cyber controls knowledge (IAM, vuln mg

Tools

BitSight

OneTrust

Job description

Intact Insurance in the United Kingdom seeks a skilled professional to manage the end-to-end Cyber Third-Party Assurance lifecycle, conducting risk assessments and reviewing security documentation to ensure secure-by-design outcomes.

You will deploy BitSight across critical third parties, track risks, and report to Risk Committees, collaborating with Line 1–3 to enhance assurance maturity and risk culture.