Remote Vendor Risk Analyst Third-Party Security Assessment

Intelance; United Kingdom; Remote; GBP 74,000 - 111,000; Part time

Job summary

Intelance, a UK advisory and assurance firm, seeks a Third Party Risk Analyst (associate contractor) to perform supplier security assessments for clients. The initial assignment runs December 2026 to February 2027, about 2–3 days per week, with lighter monthly reviews thereafter.

You will build supplier lists, rate risk, collect evidence such as SOC 2 reports, ISO 27001 certificates and data processing agreements, and report progress weekly to the ISMS Manager and Cyber Assurance lead.

Qualifications

• At least two years of hands-on supplier security or third‑party risk experience.
• Able to read and judge a SOC 2 Type II report and an ISO 27001 certificate.
• Working knowledge of ISO/IEC 27001:2022 supplier controls (5.19–5.23).
• Experience with a compliance or vendor risk platform such as Vanta, Drata, OneTrust or Whistic.
• Organised, persistent and good at chasing replies without upsetting suppliers.
• Clear, concise writing.
• Based in the UK and able to work as a self-employed contractor.
• Experience with SaaS and cloud suppliers.
• Knowledge of UK GDPR data processing agreements and international data transfers.
• Security or privacy certificate such as CompTIA Security+, ISO 27001 Foundation, CIPP/E or similar.

Responsibilities

• Build and keep a complete list of the client’s suppliers and data held, plus criticality.
• Risk rate each supplier as high, medium or low using the company method.
• Send and follow up security questionnaires and collect evidence (SOC 2, ISO 27001, penetration test summaries).
• Review evidence, record gaps and agree follow-up actions with the supplier owner.
• Check data processing agreements and security terms for data processors.
• Record all activity in the client’s compliance platform for audit readiness.
• Set review dates for periodic supplier checks.
• Report weekly progress with clear actions, owners, and dates.
• Follow Intelance quality, security and confidentiality procedures.

Skills

SOC 2 Type II

ISO 27001:2022 knowledge

Vendor risk platforms

UK GDPR knowledge

Security/privacy certificates

SaaS & cloud security

Writing & communication

UK-based self-employed

Education

Security/privacy certifications

Tools

Vanta

Drata

OneTrust

Whistic

Job description

Intelance, a UK advisory and assurance firm, seeks a Third Party Risk Analyst (associate contractor) to perform supplier security assessments for clients. The initial assignment runs December 2026 to February 2027, about 2–3 days per week, with lighter monthly reviews thereafter.

You will build supplier lists, rate risk, collect evidence such as SOC 2 reports, ISO 27001 certificates and data processing agreements, and report progress weekly to the ISMS Manager and Cyber Assurance lead.