Third Party Risk Analyst (Vendor Security Assessments)

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies certified to ISO/IEC 27001:2022. We are appointing a Third Party Risk Analyst as an associate contractor to carry out supplier security assessments for our clients. Your first assignment is a review of the suppliers used by an ISO 27001 certified technology company with offices in the UK and Asia. The work runs from December 2026 to February 2027 at about 2 to 3 days a week, then moves to a lighter monthly review. You will work with our ISMS Manager and Cyber Assurance lead, who check your work and stay accountable for quality. This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate. TasksBuild and keep a complete list of the client's suppliers, with what data each one holds and how critical it is. Risk rate each supplier as high, medium or low using our method. Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries. Review the evidence, record gaps and agree follow up actions with the supplier owner. Check data processing agreements and security terms are in place for suppliers that handle personal data. Record everything in the client's compliance platform (for example Vanta Vendor Risk Management) so it is re