Third Party Security – Senior Analyst

Join Experian as a Third Party Security Senior Analyst, based in Nottingham, England, GB, working remotely on a full-time basis. We're seeking an experienced professional to strengthen our third-party risk management and security compliance programme, protecting our organisation and clients through rigorous vendor assessment and security governance.

Position Summary

As a Third Party Security Senior Analyst at Experian, you will lead the evaluation, assessment, and ongoing monitoring of third-party suppliers and partners to ensure they meet our stringent information security and compliance standards. Working within our Legal & Compliance and Information Technology functions, you'll play a crucial role in identifying, mitigating, and managing security risks posed by our extended vendor ecosystem. This is a hands-on, strategic role combining technical security knowledge with business acumen and stakeholder management.

Key Responsibilities

• Conduct comprehensive security assessments of prospective and existing third-party vendors, evaluating technical controls, policies, and certifications
• Design, administer, and analyse security questionnaires tailored to vendor risk profiles and service types
• Lead on-site audits, penetration testing reviews, and compliance verification activities across third-party environments
• Develop and maintain vendor risk scoring and classification frameworks aligned with regulatory and business requirements
• Coordinate incident response and breach notification processes when third-party security events occur
• Liaise with procurement, legal, and operational teams to embed security requirements into vendor contracts and service-level agreements
• Produce risk reports and executive summaries to inform board and leadership decisions on vendor relationships
• Stay abreast of emerging threats, security standards, and regulatory changes affecting third-party risk

Requirements

• 5+ years' experience in third-party risk management, vendor security assessment, or closely related security compliance roles
• Demonstrated expertise in security frameworks including ISO 27001, NIST Cybersecurity Framework, and SOC 2 standards
• Strong knowledge of cloud security, infrastructure assessment, and common vendor control gaps
• Excellent written and verbal communication skills; ability to articulate technical security concepts to non-technical stakeholders
• Experience using vendor assessment tools and risk management platforms
• Relevant certifications such as CISSP, CISM, or equivalent security credential valued
• Proactive problem-solver with strong attention to detail and ability to manage multiple vendor engagements simultaneously

About Experian

Experian is a global leader in data and analytics, empowering businesses to make better decisions and enabling consumers to achieve their financial goals. Our diverse teams across Nottingham and worldwide are united by a shared purpose: to unlock the power of data to create a better tomorrow. We remain committed to fostering an inclusive workplace where all talent can thrive.

How to Apply

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.