Location: Horsham, West Sussex, United Kingdom

We are seeking a highly organised and detail-oriented Third-Party Risk Analyst to support our Information Security function. This role plays a key part in managing supplier security due diligence activities, helping to ensure that third-party suppliers, services, applications, and software meet our security and risk management requirements.

You will work closely with internal stakeholders and external suppliers, coordinating security assessments, tracking outstanding actions, and maintaining accurate records across our supplier risk management processes.

Key Responsibilities

• Support the onboarding and security review process for new suppliers, services, applications, and software
• Issue and track supplier security due diligence questionnaires
• Issue and monitor internal business impact assessments
• Follow up with suppliers and internal stakeholders to obtain outstanding information and documentation
• Review and organise supplier security documentation, including: SOC reports, Security policies, Certifications and Trust Centre evidence
• Review assessment responses and record findings, actions, risks, and follow-up queries
  Maintain and update the supplier risk management portal, ensuring information remains accurate and current
• Produce regular status reports and progress updates for the Information Security Manager
• Assist with the administration and coordination of third-party risk management activities

Skills and Experience Required

• Previous experience of working as a Third-Party Risk Analyst and knowledge of supplier due diligence and information security concepts
• Experience working within Information Security, Risk, Compliance, Procurement, or Supplier Management environments 
• Excellent organisational and administrative skills
• Strong attention to detail and the ability to maintain accurate records
• Experience coordinating multiple tasks and managing competing priorities
• Strong communication skills with the confidence to engage with both internal and external stakeholders
• Proficiency in Microsoft Office applications, particularly Excel, Word, and PowerPoint