Information security analyst

Information Security Analyst | 6 months | Outside IR35 |

A client is seeking an Information Security Analyst to support the onboarding and implementation of a new Third-Party Risk Management (TPRM) platform.

The successful candidate will be responsible for handling supplier due diligence processes, conducting risk assessments, reviewing security controls, overseeing continuous monitoring activities, supporting audits, tracking remediation efforts, and delivering technology risk reporting across the organisation's wider technology estate.

Key Responsibilities of the Information Security Analyst:

• Managing and supporting the TPRM lifecycle
• Conducting supplier due diligence and risk assessments & checklists
• Reviewing security controls, contractual clauses, and exit strategies
• Supporting continuous monitoring and supplier assurance activities
• Assisting with internal and external technology audits
• Coordinating audit evidence, remediation tracking, and management responses
• Producing risk reporting, dashboards, and stakeholder updates

Skills and Experience of the Information Security Analyst:

• Proven experience in Information Security and Governance, Risk and Compliance (GRC).
• Experience managing Third-Party Risk Management Systems
• Strong working understanding of supplier risk assessm...