Business Partner Security Analyst (Contractor)

My client - a leading Energy provider based in South West London, is seeking a Business Partner Security Analyst to join their high level, fast paced and growing division.

ABOUT

The Information Security Governance, Risk & Compliance team plays a critical role by working in

partnership with all areas of the company to protect company information, systems, assets and people against current and emerging cyber security threats.

The Business Partner Security Analyst supports provision of security assurance of cyber security requirements for strategic and critical business partners specifically.

ROLE DELIVERABLES

• As part of a monitoring and response capability, deliver action plans to suppliers to drive remediation of existing vulnerabilities on their internet surface
• Help develop capability for responding to all new vulnerability alerts and engage with suppliers immediately to drive a more proactive approach to internet facing vulnerabilities within the supply chain
• Take part in supplier contract negotiations to embed information security requirements within supplier contractual agreements
• Track remediation actions from assurance reviews to identify and remediate identified risks and confirm gaps are closed to prevent exposure to cyber threats
• Contribute to the continuous improvement of supplier assurance procedures, guidelines, frameworks to help perform supplier security assurance in a consistent and quality manner
• Support Governance, Risk & Compliance Director with metrics, presentations and other ad-hoc activity.

SKILLSET

• Degree or Equivalent demonstrable experience desirable but not critical
• Experience of 3^rd Party Risk Assessment across multiple supplier types and services
• Experience with 3^rd party vulnerability monitoring tools
• Ability to liaise with external & internal stakeholders
• Consultative and collaborative working style creating a culture of accountability and knowledge
• Information security or risk industry accreditation (e.g. CISM, CISA, CISSP, CIRM) or membership of a professional body (e.g. IISP) a plus