3rd Party Risk Analyst – Informa Job Openings Manchester

Overview

Position Title: 3rd Party Risk Analyst

Company: Informa

Location: Manchester, UK

Job Description

This important role will have ownership of the vendor security assessment process – in which you will have the have the freedom to run and shape the process in your own image. This includes process maintenance and improvement, managing 3rd Party Risk, liaising with vendors and business stakeholders to ensure vendor security risk management is done so effectively.

Responsibilities:

• Perform vendor security assessments in line with security best practice and the Informa InfoSec Management framework and policies.
• Liaise with business stakeholders to advise them on the status of vendor security risk.
• Report on the status and risk profile of assessed and unassessed vendors to the InfoSec team and the risk committee as needed.
• Work with Legal and Procurement to ensure 3rd party risks are managed end to end.
• Support divisional security officers with their 3rd party security risk assessments
• Suggest and drive improvements to the effectiveness and efficiency of the 3rd party security risk process
• Contribute to the overall Information Security programme of improvements across the Group.

Requirements:

• Excellent stakeholder management and engagement skills; experience of negotiating and managing internal and external stakeholders and third parties.
• The ability to ‘translate’ technical security issues to business risk
• Able to suggest pragmatic technical and organisational controls to manage identified risks
• Comfortable explaining complex problems in a simple, clear and concise manner to the various parts of the group.
• Excellent written and verbal communication and presentation skills.
• Effective and creative problem-solving skills.
• Proven track record of operating in time critical, diverse, creative and corporate Environments.
• Experience of working with multiple stakeholders and able to adjust approach where necessary
• Understanding of (InfoSec) risk management concepts