At a Glance
- Tasks: Manage third party IT security, including risk profiling and contract management.
- Company: Join a leading firm in the financial services sector focused on security excellence.
- Benefits: Enjoy a competitive daily rate and flexible work arrangements with 2 days onsite.
- Why this job: Be part of a crucial role that enhances security and impacts the financial industry positively.
- Qualifications: Experience in Third Party Security Management and knowledge of relevant frameworks is essential.
- Other info: This is a 12-month contract role with opportunities for professional growth.
The predicted salary is between 42000 - 84000 £ per year.
My client within the financial services industry is looking to bring in a Third Party IT Security Manager to join the team.
Responsibilities:
- Execute Third Party Due Diligence, risk profiling, onboarding, re-certification;
- Make an opinion on Third Party Security Posture;
- Define Remediation where applicable;
- Support Contract Management - ensure that the security expectations included in the contract are proportionate to the risk profiling.
Requirements:
- Previous experience in Third Party Security Management (i.e. Due Diligence, etc.) is a must;
- Knowledge of control frameworks, e.g., ISO 27000, NIST, CIS-18, COBIT-5;
- Knowledge of Swift CSP framework is essential;
- Knowledge of relevant regulations, i.e. DORA, Outsourcing, ESMA, etc.;
- Financial services experience.
Logistics:
- 12 month contract;
- 2 days a week onsite within London office;
- Up to £700p/d inside IR35.
Third Party IT Security Manager employer: Huxley
Contact Detail:
Huxley Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Third Party IT Security Manager
✨Tip Number 1
Familiarise yourself with the specific control frameworks mentioned in the job description, such as ISO 27000 and NIST. Being able to discuss these frameworks confidently during your interview will demonstrate your expertise and understanding of the role.
✨Tip Number 2
Network with professionals in the financial services sector who have experience in Third Party Security Management. Engaging in conversations about industry trends and challenges can provide you with valuable insights and potentially lead to referrals.
✨Tip Number 3
Stay updated on relevant regulations like DORA and ESMA. Showing that you are knowledgeable about current compliance requirements will set you apart from other candidates and highlight your commitment to the field.
✨Tip Number 4
Prepare examples from your previous experience that showcase your skills in risk profiling and remediation. Being ready to discuss specific scenarios will help illustrate your capabilities and how they align with the responsibilities of the role.
We think you need these skills to ace Third Party IT Security Manager
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your previous experience in Third Party Security Management. Include specific examples of Due Diligence, risk profiling, and any relevant frameworks you've worked with, such as ISO 27000 or NIST.
Craft a Strong Cover Letter: In your cover letter, express your understanding of the financial services industry and how your skills align with the responsibilities of the role. Mention your knowledge of regulations like DORA and ESMA to demonstrate your suitability.
Highlight Relevant Certifications: If you have certifications related to IT security or risk management, be sure to mention them. This could include any qualifications related to the Swift CSP framework or other control frameworks.
Proofread Your Application: Before submitting, carefully proofread your application for any spelling or grammatical errors. A polished application reflects your attention to detail, which is crucial in IT security management.
How to prepare for a job interview at Huxley
✨Showcase Your Experience
Be prepared to discuss your previous experience in Third Party Security Management. Highlight specific projects or situations where you executed due diligence, risk profiling, or onboarding processes.
✨Demonstrate Knowledge of Frameworks
Familiarise yourself with control frameworks such as ISO 27000, NIST, and CIS-18. Be ready to explain how you've applied these frameworks in your past roles, especially in relation to financial services.
✨Understand Relevant Regulations
Brush up on regulations like DORA, Outsourcing, and ESMA. During the interview, be prepared to discuss how these regulations impact Third Party IT Security and how you've navigated them in your previous positions.
✨Prepare Questions for Them
Think of insightful questions to ask about their current security posture and challenges they face with third-party vendors. This shows your genuine interest in the role and helps you assess if the company is the right fit for you.