Third Party Risk Analyst (Vendor Security Assessments)

Intelance; United States; Remote; USD 101,000 - 166,000; Part time

Benefits offered by this job

Remote work

Structured templates

Support from assurance team

Flexible project-based work

Job summary

Intelance is a UK advisory and assurance firm offering services across enterprise architecture, cyber assurance, AI governance and data governance. We are appointing a Third Party Risk Analyst as an associate contractor to carry out supplier security assessments for our clients.

Your first assignment covers reviewing suppliers for an ISO 27001 certified technology company with offices in the UK and Asia. The work runs December 2026 to February 2027 at about 2–3 days per week, then shifts to

Qualifications

• Two years of hands-on supplier security or third party risk work.
• Able to read and judge a SOC 2 Type II report and an ISO 27001 certificate and Statement of Applicability.
• Working knowledge of ISO/IEC 27001:2022 supplier controls (5.19 to 5.23).
• Experience with a compliance or vendor risk platform such as Vanta, Drata, OneTrust or Whistic.
• Organised, persistent and good at chasing replies without upsetting suppliers.
• Clear, concise writing.
• Based in the UK and able to work as a self-employed contractor.

Responsibilities

• Build and keep a complete list of the client's suppliers, with what data each one holds and how critical it is.
• Risk rate each supplier as high, medium or low using our method.
• Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries.
• Review the evidence, record gaps and agree follow up actions with the supplier owner.
• Check data processing agreements and security terms are in place for suppliers that handle personal data.
• Record everything in the client's compliance platform (for example Vanta Vendor Risk Management) so it is ready for audit.
• Set review dates so each supplier is checked again at the right time.
• Report progress each week in plain English, with clear actions, owners and dates.
• Follow Intelance quality, security and confidentiality procedures.

Skills

SOC 2 Type II report reading

ISO 27001 knowledge

Supplier risk assessments

Vendor risk platforms familiarity

Written communication

Tools

Vanta

Drata

OneTrust

Whistic

Job description

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for growing technology companies certified to ISO/IEC 27001:2022. We are appointing a Third Party Risk Analyst as an associate contractor to carry out supplier security assessments for our clients.

Your first assignment is a review of the suppliers used by an ISO 27001 certified technology company with offices in the UK and Asia. The work runs from December 2026 to February 2027 at about 2 to 3 days a week, then moves to a lighter monthly review. You will work with our ISMS Manager and Cyber Assurance lead, who check your work and stay accountable for quality.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Build and keep a complete list of the client's suppliers, with what data each one holds and how critical it is.

• Risk rate each supplier as high, medium or low using our method.

• Send and follow up security questionnaires, and collect evidence such as SOC 2 reports, ISO 27001 certificates and penetration test summaries.

• Review the evidence, record gaps and agree follow up actions with the supplier owner.

• Check data processing agreements and security terms are in place for suppliers that handle personal data.

• Record everything in the client's compliance platform (for example Vanta Vendor Risk Management) so it is ready for audit.

• Set review dates so each supplier is checked again at the right time.

• Report progress each week in plain English, with clear actions, owners and dates.

• Follow Intelance quality, security and confidentiality procedures.

Requirements

Essential

• At least two years of hands on supplier security or third party risk work.

• Able to read and judge a SOC 2 Type II report and an ISO 27001 certificate and Statement of Applicability.

• Working knowledge of ISO/IEC 27001:2022 supplier controls (5.19 to 5.23).

• Experience with a compliance or vendor risk platform such as Vanta, Drata, OneTrust or Whistic.

• Organised, persistent and good at chasing replies without upsetting suppliers.

• Clear, concise writing.

• Based in the UK and able to work as a self-employed contractor.

Desirable

• Experience with SaaS and cloud suppliers.

• Knowledge of UK GDPR data processing agreements and international data transfers.

• A security or privacy certificate such as CompTIA Security+, ISO 27001 Foundation, CIPP/E or similar.

Benefits

• Join Intelance's specialist cyber assurance associate panel.

• A clear first assignment with steady work over the winter, then ongoing reviews.

• Remote work with a written scope, timetable and agreed day rate.

• Support and review from an experienced assurance team, with structured templates.

• Flexible, project based work you can fit around other commitments.