3rd Party Assurance Consultant - Information/ Cyber Security

We are currently recruiting for an experienced Assurance Consultant with a minimum of 2 years Audit experience of third party suppliers for information security compliance.

This is a great opportunity to join the growing Security function of a FTSE 100 company who are a market leader in their sector within Financial Services, housing several well loved brands. The environment is dynamic, positively embracing change from a customer centric perspective, particularly across information and cyber security where they are adopting cutting edge tools and methodologies.

This role sits within the PCI Compliance, Contracts and Assurance team, with a particular focus on Assurance, ensuring the compliance of third party suppliers to the IT estate (to ISO standards and risk management standards), so a strong Audit background would be essential. We would welcome applications from the supplier or end-user side, but experience within a similarly complex, scaleable enterprise environment is a must.

The successful candidate will demonstrate the ability to create high quality audit reports of third party suppliers.

Responsibilities:

- Assess and analyse the information security risk environment of external IT suppliers

- Perform impact assessments third party IT suppliers

- Provide advice and guidance to internal and external stakeholders on minimum Information Security requirements

- Assist in the improvement of risk management and information security controls

Requirements:

- Minimum 2 years IT Security and Risk Audit Experience

- Good knowledge of ISO standards, DPA, EU GDPR, PCI DSS, TCF

- Significant understanding of outsourced vendor governance and security management practices

- CISSP, CISM, M.Int.ISP, CISA qualifications preferred

- ISO 27001 Lead Auditor / ISO 27001 Lead Implementer security certifications desirable

Please send your CV or contact Alex Williams at Gerrard White Consulting for more details.