Negotiable
Outside
Hybrid
Manchester, Lancashire
Summary: The Information Security Analyst role involves managing the onboarding of a new third-party risk management tool, focusing on supplier due diligence, risk assessments, and security control reviews. The position requires strong experience in Information Security and Governance, Risk and Compliance (GRC). The analyst will also support continuous monitoring and audit activities while producing risk reports and stakeholder updates. The role is a 6-month contract outside IR35, requiring on-site work 2-3 days a week in Manchester.
Key Responsibilities:
- Managing and supporting the end-to-end TPRM lifecycle
- Conducting supplier due diligence and risk assessments
- Reviewing security controls, contractual clauses, and exit strategies
- Supporting continuous monitoring and supplier assurance activities
- Assisting with internal and external technology audits
- Coordinating audit evidence, remediation tracking, and management responses
- Producing risk reporting, dashboards, and stakeholder updates
Key Skills:
- Proven experience in Information Security and Governance, Risk and Compliance (GRC).
- Experience managing the full lifecycle of Third-Party Risk Management Systems
- Strong working understanding of supplier risk assessments, audit processes, and security controls.
- Knowledge of deployment and tailoring systems within a business is desirable
- Confident stakeholder engagement and communication skills
Salary: £500.00 Daily
City: Manchester
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: outside IR35
Seniority Level: Mid-Level
Industry: IT
Detailed Description From Employer:
Information Security Analyst 6 months Contract Outside IR35
A client is looking for an experienced Information Security analyst to own the full end to end onboarding of a new third party risk management (TPRM) tool.
The role will focus on supplier due diligence, risk assessments, security control reviews, continuous monitoring, audit support, remediation tracking, and technology risk reporting across the wider estate.
Key Responsibilities of the Information Security Analyst:
- Managing and supporting the end-to-end TPRM lifecycle
- Conducting supplier due diligence and risk assessments
- Reviewing security controls, contractual clauses, and exit strategies
- Supporting continuous monitoring and supplier assurance activities
- Assisting with internal and external technology audits
- Coordinating audit evidence, remediation tracking, and management responses
- Producing risk reporting, dashboards, and stakeholder updates
Skills and Experience of the Information Security Analyst:
- Proven experience in Information Security and Governance, Risk and Compliance (GRC).
- Experience managing the full lifecycle of Third-Party Risk Management Systems
- Strong working understanding of supplier risk assessments, audit processes, and security controls.
- Knowledge of deployment and tailoring systems within a business is desirable
- Confident stakeholder engagement and communication skills
The Successful Information Security Analyst will be expected to work 2/3 days a week onsite.
Apply now to speak with VIQU IT in confidence. Or reach out to Matt Farrell via the VIQU IT website.
Do you know someone great? We'll thank you with up to £1,000 if your referral is successful (terms apply).
For more exciting roles and opportunities like this, please follow us on IT Recruitment