Third Party Risk Analyst (Vendor Security Assessments)

Intelance; United Kingdom; Remote; GBP 74,000 - 111,000; Part time

Job summary

Intelance, a UK advisory and assurance firm, seeks a Third Party Risk Analyst (associate contractor) to perform supplier security assessments for clients. The initial assignment runs December 2026 to February 2027, about 2–3 days per week, with lighter monthly reviews thereafter.

You will build supplier lists, rate risk, collect evidence such as SOC 2 reports, ISO 27001 certificates and data processing agreements, and report progress weekly to the ISMS Manager and Cyber Assurance lead.

Qualifications

• At least two years of hands-on supplier security or third‑party risk experience.
• Able to read and judge a SOC 2 Type II report and an ISO 27001 certificate.
• Working knowledge of ISO/IEC 27001:2022 supplier controls (5.19–5.23).
• Experience with a compliance or vendor risk platform such as Vanta, Drata, OneTrust or Whistic.
• Organised, persistent and good at chasing replies without upsetting suppliers.
• Clear, concise writing.
• Based in the UK and able to work as a self-employed contractor.
• Experience with SaaS and cloud suppliers.
• Knowledge of UK GDPR data processing agreements and international data transfers.
• Security or privacy certificate such as CompTIA Security+, ISO 27001 Foundation, CIPP/E or similar.

Responsibilities

• Build and keep a complete list of the client’s suppliers and data held, plus criticality.
• Risk rate each supplier as high, medium or low using the company method.
• Send and follow up security questionnaires and collect evidence (SOC 2, ISO 27001, penetration test summaries).
• Review evidence, record gaps and agree follow-up actions with the supplier owner.
• Check data processing agreements and security terms for data processors.
• Record all activity in the client’s compliance platform for audit readiness.
• Set review dates for periodic supplier checks.
• Report weekly progress with clear actions, owners, and dates.
• Follow Intelance quality, security and confidentiality procedures.

Skills

SOC 2 Type II

ISO 27001:2022 knowledge

Vendor risk platforms

UK GDPR knowledge

Security/privacy certificates

SaaS & cloud security

Writing & communication

UK-based self-employed

Education

Security/privacy certifications

Tools

Vanta

Drata

OneTrust

Whistic

Job description

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies certified to ISO/IEC 27001:2022. We are appointing a Third Party Risk Analyst as an associate contractor to carry out supplier security assessments for our clients.

Your first assignment is a review of the suppliers used by an ISO 27001 certified technology company with offices in the UK and Asia. The work runs from December 2026 to February 2027 at about 2 to 3 days a week, then moves to a lighter monthly review. You will work with our ISMS Manager and Cyber Assurance lead, who check your work and stay accountable for quality.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Build and keep a complete list of the client's suppliers, with what data each one holds and how critical it is.
• Risk rate each supplier as high, medium or low using our method.
• Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries.
• Review the evidence, record gaps and agree follow up actions with the supplier owner.
• Check data processing agreements and security terms are in place for suppliers that handle personal data.
• Record everything in the client's compliance platform (for example Vanta Vendor Risk Management) so it is ready for audit.
• Set review dates so each supplier is checked again at the right time.
• Report progress each week in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security and confidentiality procedures.

Requirements

• At least two years of hands on supplier security or third party risk work.
• Able to read and judge a SOC 2 Type II report and an ISO 27001 certificate and Statement of Applicability.
• Working knowledge of ISO/IEC 27001:2022 supplier controls (5.19 to 5.23).
• Experience with a compliance or vendor risk platform such as Vanta, Drata, OneTrust or Whistic.
• Organised, persistent and good at chasing replies without upsetting suppliers.
• Clear, concise writing.
• Based in the UK and able to work as a self-employed contractor.
• Experience with SaaS and cloud suppliers.
• Knowledge of UK GDPR data processing agreements and international data transfers.
• A security or privacy certificate such as CompTIA Security+, ISO 27001 Foundation, CIPP/E or similar.

Join Intelance's specialist cyber assurance associate panel.

A clear first assignment with steady work over the winter, then ongoing reviews.

Remote work with a written scope, timetable and agreed day rate.

Support and review from an experienced assurance team, with structured templates.

Flexible, project based work you can fit around other commitments.