Third Party Information Security Contracts Assessor

About Company

WTW (NASDAQ: WTW) is in the business of people, risk and capital. With roots dating to 1828, our company has over 45,000 colleagues serving more than 140 countries and markets. Our values – client focus, teamwork, integrity, respect and excellence – underlie all that we do, including how we behave and interact with each other. They are part of our WTW DNA. We design and deliver solutions that manage risk, optimize benefits, cultivate talent, and expand the power of capital to protect and strengthen institutions and individuals. Our unique perspective allows us to see the critical intersections between talent, assets, and ideas — the dynamic formula that drives business performance. Together, we unlock potential. We are located on the internet at

Business Unit

WTW Information and Cyber Security (ICS),

Technology and Cyber Risk Management & Regulatory Engagements function

3rd part information security assessment team

Job Summary

As Third Party Information Security Contract Assessor you will be working with WTW’s Lines of Business teams, WTW Procurement and Legals as well as Third Parties to assist with reviews of the supplier contractual agreements as they pertain to Information Security. You will also drive reviews of the Third Parties controls where required as part of contractual set up / reviews. You will be driving consistent approach to contractual agreement details as they pertain to information security ensuring they are fit for purpose and align with our risk appetite based on services that suppliers provide to WTW.

In summary, the Third Party Information Security Contract assessor specialist will ensures that contractual agreements align with security best practices, compliance standards, and risk management principles

Responsibilities & Duties

Review and negotiate terms and conditions of contractual clauses as they pertain to information and cyber security

Draft contractual agreements and revise existing contracts.

Drive standardization of information security contractual clauses with the suppliers based on services they provide

Support supplier information security risk management processes in relation to contractual agreement

Ensure all contracts comply with laws and regulations.

Participate in contract negotiation of information security clauses

Support risk assessment on contractual terms and conditions.

Provide advice and clarification on contract terms and conditions to key stakeholders including information and cyber security teams, procurement, legal, compliance, WTW supplier risk management

Maintain and update standard contractual documentation as they pertain to information security

Resolve any contract-related issues that arise.

Coordinate with relevant departments to ensure information and cyber security contractual obligations are met.

Facilitate successful business relationships and protecting the interests of WTW ensuring the best information and cyber security terms and conditions in contracts and agreements.

Interpret and explain contract terms and conditions to relevant stakeholders.

Education Qualification

Degree in Law, Business Administration, Information and cyber security

Experience Band

6 – 10 years

Technical Skills:

Need to have

Skill

Proficiency

Contractual law/ procurement practices for information security clauses Advance

Contract negotiations Advance

ITGC Controls and Information security controls Advance

Information and cyber security regulations Advance