You'll make an impact by:
- Supporting the management of the end-to-end Cyber Third-Party Assurance life-cycle process.
- Assists in conducting Third-Party Cyber Risk Assurance assessments delivering outcomes that are secure by design and within Cyber Risk appetite.
- Reviewing third-party security documentation (e.g., third-party questionnaires, SOC2 Type II reports, ISO certifications, penetration tests).
- Proactively pursuing improvements in processes, tools, and resources.
- Assisting in the deployment and ongoing assessment of the BitSight tool across our Critical, High, and Medium rated Third Parties, providing real-time insights into their risk posture.
- Identifying, assessing, tracking, and mitigating third-party cyber risks, while maintaining a view of third-party cyber risk exposure.
- Supportingthe Risk, Compliance and Governance Manager with Third-Party reporting, including, at times, generation of material in preparation for various Risk Committees such as the CIO Risk and Control committee (CIO RCC). Reporting will contribute towards Enterprise Risk and Board Risk reports.
- Risk Partnering with colleagues at all levels of the organisation across Line 1 on all Third-Party Cyber Risk related matters – including improving the Risk culture.
- Working as required with Line 2 on Assurance activity and collaboratively with Line 3 through the standard Audit lifecycle. Managing risks and issues to formal resolution.
Your skills and experience:
- Working knowledge of third-party cyber assurance
- Familiar with Third Party tooling - BitSight, OneTrust etc.
- Good communication and stakeholder management skills
- Cyber certifications beneficial (CISSP, CISA, COBIT5, CRISC,)
- Good all-round Cyber control-domain knowledge (IAM, vuln mgmt., logging, resilience)
- Understanding of third-party risk management and cyber security principles.
- Experience conducting third party cyber risk assessments.
- Ability to translate technical risk into business impact.
- Understanding of regulatory requirements (DPA/GDPR, FCA, PCI DSS).
- Good analytical skills and ability to evaluate detailed data and risks.
- Typically brings 3 to 5 years of experience with ability to apply frameworks, tooling, and risk management to enhance third party cyber assurance capability.
Win as a Team
Intact Insurance is a leading provider of Commercial and Specialty insurance solutions for businesses of all sizes across the UK and Ireland and through its Global Network in over 150 countries worldwide. Intact Insurance is part of Intact Financial Corporation, the largest provider of Property and Casualty insurance in Canada and a leading Specialty lines insurer with international expertise. We aim to deliver second-to-none service and help brokers and businesses thrive in a fast-moving world.
Shape the future
We're leading a transformation in insurance helping people, businesses and society prosper in good times and be resilient in bad times. When you join us, you're not just taking a job – you're stepping into a career where you can make a real difference.
Grow with us
We're customer-driven, community-focused, and committed to helping our people grow. Whether you're early in your journey or bringing years of experience, we'll support you with the tools, flexibility, and opportunities to thrive while going the extra mile for customers, brokers and colleagues.
Why you'll love it here
Being part of our team means you'll have the support and freedom to bring your best self to work each day. Here's a flavour of what you can look forward to:
- Annual discretionary incentive plan
- Hybrid working (with 60% of your time office-based)
- 25 days annual leave plus bank holidays and buy/sell options
- Flexible benefit options including financial and health wellbeing
- Share investment options
- Career development and mentoring
- Inclusive culture and employee networks
More benefit information here.
Our DEI commitment
We celebrate individuality and believe our differences make us stronger. We're proud to foster a culture where everyone feels respected, valued, and empowered to thrive.
As an equal opportunity employer, we ensure fair consideration for all applicants and offer interviews to all disabled candidates who meet the essential criteria.
We understand that everyone's circumstances are different and are happy to explore flexible working options—such as reduced hours or job shares—to support work–life balance.
If you meet the core criteria but not every requirement, we'd still love to hear from you. Let's explore how this role could support your next career step. If you need adjustments during the recruitment process, just let us know—we're here to support you.
