Vendor Cyber Risk Assurance Specialist

Intact Insurance (previously RSA); Horsham; Hybride; GBP 50 000 - 75 000; Plein temps

Avantages offerts par ce poste

Annual incentive plan

Hybrid working

25 days annual leave

Flexible benefits

Share options

Career development

Résumé du poste

Intact Insurance is seeking a professional to support the end-to-end Cyber Third-Party Assurance lifecycle and assist in risk assessments across our UK/Cross-border operations. You will review third-party security documentation and contribute to tooling improvements to strengthen risk posture.

The role requires experience with cyber risk, regulatory awareness, and the ability to translate technical risk into business impact. Hybrid working and a focus on governance are core elements.

Qualifications

• Working knowledge of third-party cyber assurance.
• Familiar with third-party tooling such as BitSight and OneTrust.
• Good communication and stakeholder management skills.
• Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC).
• Strong knowledge of cyber control domains (IAM, vuln mgmt., logging, resilience).
• Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
• 3–5 years of experience applying frameworks, tooling and risk management to third-party cyber assurance.

Responsabilités

• Support end-to-end Cyber Third-Party Assurance lifecycle management.
• Assist in Third-Party Cyber Risk Assurance assessments to deliver secure-by-design outcomes.
• Review third-party security documents (SOC2 Type II, ISO certifications, penetration tests).
• Contribute to process, tooling and resource improvements.
• Assist deployment and ongoing assessment of BitSight across Critical, High, and Medium third parties.

Connaissances

Third-party cyber assurance

Stakeholder management

Cyber certifications

Regulatory awareness

Risk translation

GDPR/Regulatory knowledge

Analytical skills

Outils

BitSight

OneTrust

Description du poste

Intact Insurance is seeking a professional to support the end-to-end Cyber Third-Party Assurance lifecycle and assist in risk assessments across our UK/Cross-border operations. You will review third-party security documentation and contribute to tooling improvements to strengthen risk posture.

The role requires experience with cyber risk, regulatory awareness, and the ability to translate technical risk into business impact. Hybrid working and a focus on governance are core elements.