Information Security - Risk Analyst (Third Party Risk)

Reference: 4jy27u1nsucug7cyywc1

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle.

Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps, assess potential business impact, recommend appropriate remediation actions and track issues through to resolution. You will also support the development and maintenance of third-party risk records, prepare risk summaries and management reports, and escalate material concerns in line with governance requirements.

The successful candidate will have experience in information security, technology risk, supplier assurance, cybersecurity or a related discipline, with a good understanding of third-party risk management principles and security frameworks such as ISO 27001, NIST or equivalent standards. Familiarity with data protection, cloud security, business continuity, vulnerability management and risk-based control assessments is desirable. You should be confident reviewing technical and governance documentation, communicating with internal stakeholders and suppliers, and translating complex security matters into practical recommendations. Strong analytical, organisational and writing skills are essential, along with the ability to manage multiple assessments and deadlines. Relevant professional qualifications or certifications in information security, risk management, audit or privacy would be advantageous.

COMPETITIVE SALARY
Added 29/09/2026
Reference: 4jy27u1nsucug7cyywc1

Information Security - Risk Analyst (Third Party Risk)

Southampton, England, United Kingdom Permanent Risk Analyst

Other similar jobs

Information and Privacy adviser

Added 15/10/2026

An exciting opportunity has arisen for an Information and Privacy Adviser to provide expert guidance on information governance, data protection and privacy matters. Working with colleagues across the organisation, you will help ensure that personal and business information is handled lawfully, securely and transparently. You will advise on the practical application of relevant legislation, regulatory requirements, policies and best practice, supporting a strong culture of information responsibility. Your responsibilities will include responding to information rights requests, advising on data protection impact assessments, reviewing information-sharing arrangements and contributing to the management of data breaches and privacy incidents. You will maintain accurate...

Learn more

Information Security Third Party Assurance Analyst

Added 03/09/2026

We are seeking an Information Security Third Party Assurance Analyst to support the assessment and ongoing oversight of the organisation’s suppliers, partners and other external service providers. In this role, you will help ensure that third parties meet required information security, privacy, resilience and risk management standards before and throughout the relationship lifecycle. You will work closely with procurement, legal, technology, privacy, risk and business teams to provide clear, practical assurance and support informed risk-based decisions. Your responsibilities will include reviewing supplier security questionnaires, independent assurance reports, policies, certifications and other evidence; assessing controls against recognised frameworks and internal requirements;...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite. You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you...

Learn more

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across our external supplier and partner ecosystem. In this role, you will lead the development and delivery of a robust third-party cyber risk management programme, helping ensure that suppliers meet required security, resilience, privacy and regulatory standards. You will work closely with procurement, legal, technology, information security, risk and business teams to embed effective controls throughout the supplier lifecycle. Your responsibilities will include defining and maintaining third-party cyber risk policies, standards, procedures and assessment methodologies; conducting risk assessments and due diligence for...

Learn more

Third Party Cyber Risk Lead

Added 25/08/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex supplier and partner ecosystem. In this role, you will develop and oversee a proportionate third-party cyber risk management framework, helping ensure that suppliers meet security expectations throughout the procurement, onboarding, monitoring, renewal and offboarding lifecycle. You will work closely with procurement, legal, information security, technology, risk and business stakeholders to embed effective controls and provide clear, practical advice. Your responsibilities will include conducting and overseeing supplier cyber risk assessments, reviewing security questionnaires and independent assurance reports, identifying control gaps,...

Learn more

Third Party Cyber Assurance Analyst

Added 23/09/2026

We are seeking a Third Party Cyber Assurance Analyst to support the assessment and ongoing monitoring of suppliers, partners, and service providers that have access to sensitive information or critical systems. You will help ensure that third parties meet required cybersecurity, privacy, and resilience standards throughout the relationship lifecycle, from onboarding and due diligence through to renewal, remediation, and exit. This role will work closely with procurement, legal, risk, technology, and business stakeholders to identify and manage third-party cyber risk effectively. Key responsibilities will include reviewing security questionnaires, independent assurance reports, certifications, penetration testing results, policies, and other evidence provided...

Learn more

Third Party Security Due Diligence Lead

Added 09/09/2026

We are seeking a Third Party Security Due Diligence Lead to oversee the assessment and management of information security risks associated with suppliers, partners and other external service providers. In this role, you will lead the end-to-end due diligence process, ensuring that third parties meet defined security, privacy, resilience and compliance requirements before and throughout the relationship lifecycle. You will work closely with procurement, legal, privacy, technology, risk and business stakeholders to provide clear, practical and risk-based recommendations. Your responsibilities will include designing and maintaining third-party security assessment processes, reviewing security questionnaires and supporting evidence, and evaluating controls across areas...

Learn more

Director, IT Security Third Party Monitor & Compliance

Added 09/09/2026

We are seeking a Director, IT Security Third Party Monitor & Compliance to lead the governance, oversight, and continuous improvement of third-party information security and compliance activities. This senior role will establish and maintain a comprehensive framework for assessing suppliers, service providers, and strategic partners throughout the relationship lifecycle. You will ensure that third-party risks are identified, evaluated, documented, and managed in line with applicable regulatory obligations, internal policies, contractual requirements, and recognised industry standards. Key responsibilities include directing third-party security assessments, reviewing control evidence, monitoring remediation plans, and providing clear risk-based reporting to senior leadership and relevant governance committees....

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to support the effective management of cyber security risks arising from suppliers, service providers and other external partners. In this role, you will help strengthen third-party assurance processes, provide informed risk assessments and ensure that external relationships meet applicable security, regulatory and contractual requirements. This is an interim opportunity suited to a practical professional who can quickly understand existing processes, identify gaps and deliver measurable improvements. Your responsibilities will include reviewing supplier security documentation, assessments, certifications and control evidence; conducting risk-based due diligence for new and existing third parties; and...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an experienced Interim Third-Party Cyber Oversight Specialist to strengthen the management and assurance of cyber security risks arising from suppliers, outsourcing arrangements and other external partners. This interim role will provide practical oversight across the third-party lifecycle, helping to ensure that security requirements are clearly defined, assessed and monitored in line with internal policies, regulatory expectations and recognised industry standards. Key responsibilities will include reviewing supplier security assessments, due diligence questionnaires, independent assurance reports and risk evidence; identifying control gaps and documenting associated risks; and recommending appropriate remediation actions or mitigating controls. You will work closely with...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to strengthen the oversight of suppliers, outsourcing partners and other external service providers. This role will help ensure that third-party relationships meet required cybersecurity, information security, privacy and operational resilience standards. You will assess supplier risk, review control environments and provide practical recommendations to improve the management of external dependencies across the organisation. Key responsibilities will include conducting cyber and information security assessments during supplier onboarding, periodic reviews and significant changes to services. You will analyse security questionnaires, independent assurance reports, penetration-testing summaries, policies, risk registers and remediation plans, identifying gaps...

Learn more

Interim Third party Cyber Oversight Specialist

Added 12/10/2026

We are seeking an Interim Third-Party Cyber Oversight Specialist to provide expert assurance and governance across the organisation’s supplier and outsourcing landscape. This role will focus on assessing and managing cyber security risks arising from third parties, helping to ensure that external providers meet required security, resilience, privacy and regulatory standards. The successful candidate will work closely with procurement, technology, risk, legal and business stakeholders to strengthen oversight practices and support informed risk-based decision-making. Key responsibilities will include reviewing third-party security assessments, due diligence questionnaires, audit reports, penetration testing results, remediation plans and contractual security requirements. You will identify control...

Learn more

Senior Consultant, Technology Implementation, Third Party Management, Extended Enterprise, Cyber

Added 28/09/2026

We are seeking a Senior Consultant to support technology implementation and third-party management initiatives across an organisation’s extended enterprise and cyber risk landscape. This role will help clients understand, manage and improve the security, resilience and performance of their relationships with suppliers, partners, contractors and other external stakeholders. You will work closely with business, technology, procurement, risk and compliance teams to deliver practical solutions aligned with strategic objectives and regulatory expectations. Responsibilities will include leading or contributing to third-party risk assessments, due diligence reviews, control evaluations and remediation programmes. You will help design and implement technology-enabled processes for supplier onboarding,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.