Manager - Third Party Assurance - 12 month FTC

Information Security Specialist - Supplier Assurance
Organisation: Global Law Firm
Role Type - FTC - 12 months
Salary - £65,000 - £80,000 per annum (dependant on experience)
Location: Hybrid Working (2 days per week on-site)
Reports to: Senior Security Manager
Team: Information Security

The Role
We are seeking an accomplished Information Security Specialist to join the Supplier Assurance team in a role critical to the firms third-party risk management and client due diligence operations. This position plays an essential part in maintaining the organisations ISO 27001 certification and upholding the highest standards of supplier security assurance.
Reporting to the Senior Security Manager, you will contribute to the implementation and continuous improvement of the Supplier Assurance Security Model, ensuring the firm delivers exceptional service to clients during security due diligence processes. This role offers an excellent opportunity to develop specialist expertise within supplier assurance whilst working within a sophisticated, global information security function.

Key Responsibilities
Supplier Assurance Framework

• Support the development, implementation, and continuous enhancement of the Supplier Assurance Security Model
• Maintain accurate records and documentation supporting the firms third-party security programme
• Contribute to the evolution of supplier assurance policies, procedures, and standards

• Manage the Third-Party Security Schedule, including liaison and negotiation with external suppliers
• Conduct security assessments of vendors and third-party service providers
• Review and refine security provisions within commercial agreements
• Escalate complex or high-risk matters to the Senior Security Manager as appropriate

• Manage client due diligence requests with professionalism and accuracy
• Prepare comprehensive responses to security questionnaires that demonstrate the firms security maturity
• Coordinate with internal stakeholders to gather evidence and information efficiently
• Escalate complex questionnaires to the Senior Security Manager where necessary

• Provide evidence and documentation for ISO 27001 audits from a supplier assurance perspective
• Generate management information for the CISO, including trend analysis, process gaps, and improvement recommendations
• Support internal and external audit activities as required

• Participate in Supplier Assurance governance forums and working groups
• Identify opportunities to enhance processes and increase operational efficiency
• Maintain current knowledge of industry best practices, emerging threats, and regulatory developments in supplier assurance

• Solid experience in an Information Security Supplier Assurance capacity within a professional services or corporate environment
• Background within medium to large legal, financial services, or similarly regulated organisations
• Strong understanding of information security principles across multiple domains
• Working knowledge of ISO 27001 requirements and third-party risk management frameworks
• Familiarity with vendor risk assessment methodologies and security questionnaire processes

• Excellent organisational skills with the ability to prioritise workload effectively and meet competing deadlines
• Strong stakeholder management capabilities, able to engage with colleagues at various levels
• Effective negotiation skills when liaising with external suppliers and internal business units
• Outstanding written and verbal communication skills, with the ability to articulate technical concepts clearly
• Self-motivated with a commitment to continuous professional development
• Detail-oriented with strong analytical and problem-solving abilities

• Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Auditor/Implementer