Security Assurance Analyst

The role

This person will drive the assurance process by completing customer security questionnaires and leading due diligence on potential suppliers. They will work with Sales, Product, Procurement, and Legal to build an evidence base for customer trust.

What you will do

• Cover the full lifecycle of customer security questionnaires and vendor due diligence.
• Work directly with Sales, Product, Procurement and Legal.
• Shape how assurance work gets done, including building a central repository of responses and evidence.
• Work closely with the Security Manager and Cyber Security Engineer.
• Influence decisions made by Procurement, Legal, and the wider business through vendor risk judgement.

Required qualifications

• Experience in a security, compliance, vendor risk, or customer assurance role, or a closely related analytical or customer-facing role with a genuine interest in cybersecurity.
• Experience completing or coordinating customer security questionnaires (such as SIG, CAIQ, or VSAQ) or equivalent structured assessments, or clear evidence you could pick this up quickly.
• Working knowledge of at least one information security or privacy framework, such as ISO 27001, SOC 2, NIST, or GDPR.
• Ability to translate how a product works in security requirements and risks.
• Strong written and verbal communication skills, with the ability to explain security concepts clearly to non-technical audiences.
• Excellent organisational skills and attention to detail, with the ability to manage multiple concurrent deadlines and form sound risk judgements from supplier documentation.

Benefits

• Hybrid working: home and Cambridge office.
• Monthly wellbeing allowance.
• Generous paid time off.
• Genuine investment in learning, development, and career progression.
• Private health insurance.

Before you apply

• Your application will be reviewed by a person.
• We don't use AI or automated tools to assess applications.

About the company

Redgate builds solutions that help data professionals securely manage the data and databases that their organizations depend on. The company operates in an environment built on trust, accountability, and collaboration.