Third Party Technical Risk Assessment Analyst (Cybersecurity)

The Vanguard Group; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A global financial services firm is seeking a Third Party Technical Risk Assessment Analyst to lead cybersecurity assessments of third-party vendors and technologies. The ideal candidate has at least 3 years of experience in IT Security and a relevant undergraduate degree. This role involves identifying cybersecurity trends, determining risk mitigation strategies, and producing detailed assessment reports. The company promotes a hybrid working model to enhance flexibility and collaboration.

Qualifications

• Strong related work experience with at least three years of experience in Third-Party Security, IT Security, Cyber Security, and/or IT Audit.
• Interest in obtaining one professional security certification such as ISC2, CISSP, GIAC, or CISA.

Responsibilities

• Lead the analysis and evaluation of third-party cybersecurity controls and technologies.
• Determine risk mitigation and remediation strategies in partnership with stakeholders.
• Identify emerging cybersecurity trends and needs and make recommendations for process improvements.
• Produce assessment reports detailing the actions taken and results of cybersecurity risk assessments.
• Participate in special projects and perform other duties as assigned.

Skills

ISO 27001

Microsoft Access

Risk Management

Financial Services

PCI

Risk Analysis

Analysis Skills

COBIT

NIST Standards

SOX

Information Security

Data Analysis Skills

Education

Undergraduate degree or equivalent combination of training and experience

Graduate degree preferred

Job description

Leads a team in working with IT sub-divisions third party vendors and the business units as the technical authority on processes and best practices on third party risk assessments of applications and technologies.

Third Party Technical Risk Assessment Analyst (Cybersecurity)

Global Risk and Security (GR&S) at Vanguard enables business strategy protects client and Vanguard interests (e.g. assets and data) and stewards a strong risk culture. Our teams leverage enterprise-wide insights deep expertise and trusted advice so that across Vanguard leaders and crew drive faster stronger risk-informed decisions.

Within GR&S the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew property data and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged passionate and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

In this role you will :

• Lead the analysis and evaluation of third-party cybersecurity controls and technologies to determine whether security controls meet internal standards.
• Determine risk mitigation and remediation strategies in partnership with stakeholders.
• Identify emerging cybersecurity trends and needs making recommendations for process improvements as needed.
• Following the defined assessment methodology and documentation standards produce assessment reports detailing the actions taken to assess and results of cybersecurity risk assessments.
• Participate in special projects and perform other duties as assigned.

What it takes :

• Strong related work experience with at least three years of Third-Party Security IT Security Cyber Security and / or IT Audit experience.
• Undergraduate degree or equivalent combination of training and experience. Graduate degree preferred.
• Be interested in obtaining one professional security certification such as ISC2 CISSP GIAC Security Essentials Certification (GSEC) Certified Information Systems Auditor (CISA) etc.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members designed to capture the benefits of enhanced flexibility while enabling in-person learning collaboration and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Required Experience :

IC

Key Skills

• ISO 27001
• Microsoft Access
• Risk Management
• Financial Services
• PCI
• Risk Analysis
• Analysis Skills
• COBIT
• NIST Standards
• SOX
• Information Security
• Data Analysis Skills

Employment Type: Full-Time

Experience: years

Vacancy: 1