Third-Party Risk Management Analyst
ABOUT TALANOS
Who we are
Talanos is a UK managed security service provider. We protect midmarket organisations, many of them in financial services and other regulated industries, with a 24/7 Managed SOC, managed detection and response, vulnerability management and third-party risk management. Our teams work from the UK, South Africa and India.
Our TPRM service runs on the Risk Ledger platform. We assess our clients’ critical suppliers, interpret the control gaps we find as business risks rather than scoring a questionnaire, and work with the suppliers themselves until those risks are remediated.
THE ROLE
What the job is
We need an experienced TPRM Analyst on a fixed-term basis to cover immediate demand. You’ll own supplier assessments for our clients from onboarding through to sign-off: assessing each supplier, explaining the findings to client stakeholders, and following up with the supplier until the risk is closed.
There is no long ramp-up. You’ll pick up live client assessments in your first week, so you need to be confident working independently from the start. The role reports to our COO.
RESPONSIBILITIES
What you’ll do
- Assess clients’ critical suppliers against recognised frameworks, including NIST CSF, ISO 27002 and the NCSC Cyber Assessment Framework
- Run each assessment end to end: supplier onboarding, assessment, review, remediation and sign-off
- Turn control gaps into business risks a client can act on, and write the recommendation report as each assessment completes
- Work directly with suppliers to evidence their controls and close down the risks you find
- Scope engagements with client stakeholders and present your findings to them
- Support clients as they tier their suppliers by criticality, including running tiering workshops
- Keep supplier risk profiles up to date in the Risk Ledger platform
REQUIREMENTS
What we’re looking for
- Available to start immediately or at very short notice
- Happy to work on a fixed-term contract for an initial 3–6 months
- Around five years’ experience in TPRM, vendor risk or third-party security assessment, and able to run live assessments on your own quickly
- Strong working knowledge of at least one recognised framework: NIST CSF, ISO 27001/27002, the NCSC CAF or similar
- A clear, confident communicator who can lead client conversations and challenge suppliers on their findings
- Experience with Risk Ledger is a strong advantage. Experience with another TPRM or GRC platform, such as OneTrust, Prevalent or ProcessUnity, also counts
- Certifications such as CTPRP or ISO 27001 Lead Auditor are welcome but not required
HOW TO APPLYd us your CV
Email your CV and a short covering note, including your salary expectations, to Dennis Ball, Chief People Officer, at dennis@taloscs.com.
