Vendor Risk Analyst — Remote Contractor (ISO 27001)

Intelance; Greater London; Remote; GBP 65,000 - 129,000; Part time

Benefits offered by this job

Remote work with written scope

Structured templates and support

Flexible project-based engagements

Job summary

Intelance is seeking a Third Party Risk Analyst on an associate contractor basis to conduct supplier security assessments for its clients. The role involves building supplier inventories, rating risk levels, issuing security questionnaires and collecting evidence such as SOC 2 reports and ISO 27001 certificates.

You will work with an ISMS Manager and Cyber Assurance lead on defined scopes from December 2026 to February 2027, with ongoing reviews thereafter.

Qualifications

• At least two years of hands on supplier security or third party risk work.
• Able to read and judge a SOC 2 Type II report and an ISO 27001 certificate and Statement of Applicability.
• Working knowledge of ISO/IEC 27001:2022 supplier controls (5.19 to 5.23).
• Experience with a compliance or vendor risk platform such as Vanta, Drata, OneTrust or Whistic.
• Organised, persistent and good at chasing replies without upsetting suppliers.
• Clear, concise writing.
• Based in the UK and able to work as a self-employed contractor.

Responsibilities

• Build and keep a complete list of the client's suppliers, with what data each one holds and how critical it is.
• Risk rate each supplier as high, medium or low using our method.
• Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries.
• Review the evidence, record gaps and agree follow up actions with the supplier owner.
• Check data processing agreements and security terms are in place for suppliers that handle personal data.
• Record everything in the client's compliance platform so it is ready for audit.
• Set review dates so each supplier is checked again at the right time.
• Report progress each week in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security and confidentiality procedures.

Skills

Supplier security

SOC 2 Type II literacy

ISO 27001 literacy

ISO 27001:2022 controls 5.19–5.23

Vanta/Drata/OneTrust/Whistic

Written communication

UK-based contractor experience

Tools

Vanta

Drata

OneTrust

Whistic

Job description

Intelance is seeking a Third Party Risk Analyst on an associate contractor basis to conduct supplier security assessments for its clients. The role involves building supplier inventories, rating risk levels, issuing security questionnaires and collecting evidence such as SOC 2 reports and ISO 27001 certificates.

You will work with an ISMS Manager and Cyber Assurance lead on defined scopes from December 2026 to February 2027, with ongoing reviews thereafter.