Security Analyst

Salary: £55,000 - 95,000 per year

Requirements

• We are looking for at least 3 years of experience in Information Security, Cyber Risk Management, Third-Party Risk Management, Supplier Assurance, or GRC functions.
• We need demonstrable experience working on third-party security risk programmes within medium to large enterprises.
• We require experience supporting organisations operating across multiple jurisdictions, including the UK and European Union.
• We value experience reviewing supplier security assessments, due diligence questionnaires, audit reports, and compliance evidence.
• We expect experience supporting security and risk activities related to mergers and acquisitions.
• We are looking for solid hands-on experience in TPRM, security risk, or GRC.
• We need proven ability to independently deliver third-party assessments end to end.
• We require a strong understanding of regulatory frameworks such as GDPR, ISO 27001, and ISO 42001.
• We expect regular interaction with stakeholders, with limited strategic ownership.

Responsibilities

• We collaborate with cross-functional teams including Legal, Procurement, Privacy, and Compliance.
• We provide clear, risk-based insights to stakeholders and support decision-making.
• We support audit, regulatory, and customer assurance requirements.
• We use GRC platforms such as OneTrust, BitSight, Drata, Swiss GRC, and internal SaaS solutions to manage TPSA activities.
• We support month-end SLA reporting and develop dashboards using Power BI and SharePoint.
• We contribute to governance forums and risk review meetings.
• We ensure adherence to TPSA tiering models, standards, and processes.
• We maintain oversight of third-party risks throughout the vendor lifecycle.
• We perform periodic reassessments and continuous monitoring activities.
• We track remediation activities and risk treatment plans through closure.
• We maintain third-party risk registers, dashboards, and management reporting.
• We escalate material risks and control deficiencies to appropriate governance forums.
• We partner with Procurement, Legal, Compliance, Privacy, Enterprise Risk, Internal Audit, and Technology teams.
• We provide risk-based recommendations to business stakeholders and decision-makers.
• We support customer assurance requests and regulatory inquiries where required.
• We participate in governance committees and risk review meetings.
• We use GRC platforms and applications to support TPSA operations.
• We support the development of assessment methodologies, risk scoring models, and reporting frameworks.

Technologies

• AI
• Support
• Power BI
• Security
• SharePoint
• Network

More

We are NTT DATA, a global business and technology services, AI and digital infrastructure leader with more than $30 billion in revenue, serving 75% of the Fortune Global 100 and operating across more than 70 countries. We offer a full-time, permanent Senior Security Analyst role in our Third-Party Security Assurance team, based in the United Kingdom with remote working options. We provide tailored benefits that support physical, emotional, and financial wellbeing, continuous learning and development opportunities, and flexible work options. We are proud to be a Global Top Employer and we are committed to equal opportunities, equity, diversity, inclusion, and creating an accessible recruitment process for candidates with disabilities and long-term health conditions.

last updated 35 week of 2026