Manager - Third Party Assurance

Manager - Third Party Assurance - Security Suppliers, CISSP, CISM, ISO27001

Our global law firm client are currently looking to take on a new Manager - Third Party Assurance (Security Suppliers, CISSP, CISM, ISO27001) on a contractual basis for 12 months. This role will be supporting the Senior Manager to produce and champion the supplier security model.

The firm are extremely laid back by law firm standards, though still expect and produce high quality work. The firm are forward-thinking and have a very anti-micromanaged and autonomous approach to the work life, with a healthy amount of flexible working.

This Manager - Third Party Assurance (Security Suppliers, CISSP, CISM, ISO27001) role will require prior experience in an Information Security Assurance role, experience with Security Suppliers and ideally legal or financial services experience.

Duties, Responsibilities & Person Specification

• Assisting the Senior Manager to produce, embed, and champion the Supplier Assurance Security Model.
• Producing management information for the CISO, including trends, process gaps, and recommendations for improvement.
• Managing client requests in a timely and professional manner, escalating complex requests to the Senior Manager.
• Arranging and participating in Supplier Assurance governance forums.
• Maintaining the Third-Party Security Schedule (including supplier negotiations).
• Providing excellent service to our clients through our interactions and responses to due diligence questionnaires. Escalating complex questionnaires to the Senior Manager.
• Editing and negotiating straightforward security clauses in contracts for robustness.
• Providing evidence for audits and ISO 27001 certification from a Supplier Assurance perspective.