Information Security Engineer

Roles & Responsibility

• Managing and conducting supplier risk assessments including report output and recommendations.
• Liaising with business and external vendors to ensure Vendor services and products meet baseline security requirements as defined by policy.
• Tracking the closure of supplier assessments and issues identified from TPSA reviews 
• Utilising Bitsight software to carry out non intrusive technical assessments of current and future third parties.
• Security reassessments in line with the criticality / Tier of the Vendor and conduct off-boarding assessments at the end of the contract
• Advising & supporting management on Compliance and Security issues for third parties.
• Assisting in remedial action taken as a result of failures from a security or governance perspective.
• Producing monthly & quarterly progress/ status reports.
• Assisting with incident management and investigation.