Third Party Technical Risk Assessment Analyst (Cybersecurity)

The Vanguard Group; City Of London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A global financial services company is seeking a Third Party Technical Risk Assessment Analyst specialized in cybersecurity in London. The role involves leading the analysis of cybersecurity controls, determining risk strategies, and producing assessment reports. Candidates should possess at least three years of relevant experience and be interested in obtaining professional security certification. The company offers a hybrid working model fostering collaboration and flexibility.

Qualifications

• At least three years of related work experience in Third-Party Security, IT Security, Cyber Security, and/or IT Audit.
• Interest in obtaining professional security certification.

Responsibilities

• Lead analysis of third-party cybersecurity controls and technologies.
• Determine risk mitigation and remediation strategies.
• Identify emerging cybersecurity trends and recommend process improvements.
• Produce assessment reports detailing cybersecurity risk assessments.
• Participate in special projects and perform other duties.

Skills

Third-Party Security

IT Security

Cyber Security

IT Audit

Education

Undergraduate degree or equivalent

Graduate degree preferred

Job description

Leads a team in working with IT sub-divisions, third party vendors, and the business units as the technical authority on processes and best practices on third party risk assessments of applications and technologies.

Third Party Technical Risk Assessment Analyst (Cybersecurity)

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise‑wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk‑informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub‑division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state‑of‑the‑art security and fraud capabilities. We are a world‑class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever‑changing security landscape.

In this role you will:

• Lead the analysis and evaluation of third‑party cybersecurity controls and technologies to determine whether security controls meet internal standards.
• Determine risk mitigation and remediation strategies in partnership with stakeholders.
• Identify emerging cybersecurity trends and needs making recommendations for process improvements as needed.
• Following the defined assessment methodology and documentation standards, produce assessment reports detailing the actions taken to assess and results of cybersecurity risk assessments.
• Participate in special projects and perform other duties as assigned.

What it takes:

• Strong related work experience, with at least three years of Third‑Party Security, IT Security, Cyber Security, and/or IT Audit experience.
• Undergraduate degree or equivalent combination of training and experience. Graduate degree preferred.
• Be interested in obtaining one professional security certification such as ISC2 CISSP, GI Security Essentials Certification (GSEC), Certified Information Systems Auditor (CISA), etc.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in‑person learning, collaboration, and connection. We believe our mission‑driven and highly collaborative culture is a critical enabler to support long‑term client outcomes and enrich the employee experience.