Third Party Security Lead

idibu; Reading; Hybrid; GBP 52,000 - 62,000; Full time

Job summary

A leading company is seeking a Third-Party Security Risk Lead to join their Information Security team in Reading. This full-time role involves developing a robust risk management program, conducting audits, and collaborating with various teams. The ideal candidate will have significant experience in managing third-party risks and excellent communication skills.

Benefits

26 days holiday, increasing to 30 with service

Generous pension scheme

Health and wellbeing benefits

Qualifications

• Proven ability in Third-Party Security Risk Management.
• Over 5 years in IT risk management.
• Experience collaborating with procurement, legal, and commercial teams.

Responsibilities

• Develop and implement the Third-Party Security Risk Management Strategy.
• Conduct regular security reviews and audits of third-party relationships.
• Monitor and report on the effectiveness of the risk management program.

Skills

Third-Party Security Risk Management

Information Security

Communication Skills

Stakeholder Communication

Job description

As the Third-Party Security Risk Lead, you will be part of the Information Security team, focused on establishing and managing a Third-Party Security Risk Management program. Your role involves monitoring third-party relationships and mitigating associated risks. This position requires experience in Information Security, particularly in measuring and managing third-party risk activities.

The role is based in Reading, reporting directly to the Head of Governance, Risk and Compliance. You will contribute to developing a robust third-party security risk management program, requiring independence, a proactive approach, and accountability.

Responsibilities:

1. Develop and implement the Third-Party Security Risk Management Strategy, standards, and procedures.
2. Conduct regular security reviews and audits of third-party relationships for compliance and risk mitigation.
3. Collaborate with procurement, legal, and commercial teams to integrate risk management into internal processes.
4. Support onboarding and offboarding of third parties, ensuring adherence to policies and regulations.
5. Monitor and report on the effectiveness of the risk management program to senior management.
6. Provide guidance throughout the third-party lifecycle, from selection to termination.

Location and Working Pattern:

Reading – Hybrid (occasional travel). Full-time, 36 hours/week.

Requirements:

Essential Experience:

• Proven ability in Third-Party Security Risk Management.
• Understanding of information and cybersecurity risks.
• Experience collaborating with procurement, legal, and commercial teams.
• Excellent communication skills with strong business acumen.

Skills & Qualifications:

• Designing and deploying third-party security risk capabilities.
• Over 5 years in IT risk management.
• Effective stakeholder communication skills.
• Experience delivering third-party risk solutions.

Desirable:

• Experience in Cyber Security or Information Security.

Key Relationships:

• Reports to CISO (Security Operations, Architecture, Governance, Cyber Security Program, Resilience).
• Interacts with CIO and related teams, key business stakeholders, and service owners.

Benefits:

• Competitive salary up to £62,000.
• 26 days holiday, increasing to 30 with service, plus bank holidays.
• Generous pension scheme.
• Health and wellbeing benefits, including health MOTs, physiotherapy, counselling, Cycle to Work, vouchers, and life assurance.