INFORMATION SECURITY EXPERT – VENDOR RISK & SECURITY DUE DILIGENCE
Core
Conduct security due diligence and vendor risk assessments for a global insurance group, ensuring security alignment with business strategy and cost efficiency.
Role type
Senior IC information security expert (vendor risk & due diligence)
Builds
Documented vendor risk assessments, quality control reports for IS/OR evaluations, and structured risk registers.
Domain
Insurance industry + cybersecurity risk management
Required skills
Cyber risk threat analysis, Vendor assessment, Security risk analysis methodology, Complex business/IT scenario analysis, Structured technical writing, Project and budget management, Stakeholder coordination
Preferred skills
Cloud architecture, Business continuity planning
Technologies
ISO 27001, ISO 27005, CISSP, CISM, MBCI, DRII
Responsibilities
Perform security due diligence within the vendor risk framework, Support quality control of vendor IS and Operational Risk evaluations, Contribute to Vendor Risk Committee (VRC) preparations, Identify and analyze product, project, and vendor risks with mitigation recommendations
Seniority
Senior, confirmed level with 5+ years experience
