At a Glance
- Tasks: Conduct vendor risk assessments and analyse security controls to identify vulnerabilities.
- Company: Dynamic organisation focused on third-party cyber risk management.
- Benefits: Competitive pay, flexible work arrangements, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on emerging risks and stakeholder engagement.
- Why this job: Make a real impact by translating complex infosec concepts into actionable insights.
- Qualifications: Experience in information security and strong analytical skills.
We are looking for an experienced Information Security Analyst with a strong focus on third-party cyber risk management. This role centres on conducting detailed vendor risk assessments, analysing findings and presenting clear, actionable insights to stakeholders.
You'll play a key role in translating complex infosec concepts into business-friendly language, enabling informed decision-making across the organisation.
Key Responsibilities:- Conduct in-depth third-party cyber risk assessments across vendors and partners
- Analyse security controls, identify vulnerabilities and assess overall risk exposure
- Proactively identify and flag emerging risks before they impact the business
- Produce high quality assessment reports with clear findings and recommendations
- Present risk insights to both technical and non-technical stakeholders
- Translate infosec 'technical speak' into clear business risk language to support decision-making
- Track remediation activities and ensure timely completion
Infosec Analyst - TPRM in London employer: Sanderson Recruitment
Contact Detail:
Sanderson Recruitment Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Infosec Analyst - TPRM in London
✨Tip Number 1
Network like a pro! Reach out to folks in the InfoSec community, especially those who work in third-party risk management. Attend meetups or webinars, and don’t be shy about asking for informational interviews – you never know where a casual chat might lead!
✨Tip Number 2
Show off your skills! Prepare a portfolio of your past assessments and reports. When you get the chance to chat with potential employers, share specific examples of how you've identified risks and communicated them effectively to stakeholders.
✨Tip Number 3
Stay updated on industry trends! Follow relevant blogs, podcasts, and news sources to keep your knowledge fresh. This will not only help you in interviews but also show that you're genuinely passionate about the field.
✨Tip Number 4
Apply through our website! We’ve got loads of opportunities that might just be perfect for you. Plus, applying directly can sometimes give you an edge over other candidates. Don’t miss out!
We think you need these skills to ace Infosec Analyst - TPRM in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in third-party cyber risk management. We want to see how you've tackled vendor assessments and what insights you've provided in the past.
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about InfoSec and how your skills align with our needs. Keep it engaging and relevant to the role.
Showcase Your Communication Skills: Since you'll be translating complex infosec concepts into business-friendly language, make sure to demonstrate your communication skills in your application. We love clear and concise writing!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Don’t miss out!
How to prepare for a job interview at Sanderson Recruitment
✨Know Your Stuff
Make sure you brush up on your knowledge of third-party cyber risk management. Be ready to discuss specific methodologies for conducting vendor risk assessments and how you’ve applied them in past roles. This shows you’re not just familiar with the concepts but can also implement them effectively.
✨Speak Their Language
Since you'll need to translate complex infosec concepts into business-friendly language, practice explaining technical terms in simple terms. Think about how you would explain a vulnerability or risk assessment to someone without a tech background. This will demonstrate your ability to communicate effectively with stakeholders.
✨Showcase Your Analytical Skills
Prepare to discuss examples where you've identified vulnerabilities and assessed risk exposure. Bring along any reports or presentations you've created that highlight your analytical skills. This will help you illustrate your experience and the impact of your work on previous projects.
✨Engage with Questions
Don’t forget to prepare thoughtful questions for your interviewers. Ask about their current challenges in third-party risk management or how they measure the success of their security initiatives. This shows your genuine interest in the role and helps you gauge if the company is the right fit for you.