Third Party Risk Analyst

Vorboss is building the future of business infrastructure in London. We started by building London’s largest fibre network and are now expanding to provide the full range of IT and cybersecurity services that modern businesses rely on. Our goal is simple: give London businesses a single, trusted partner for everything from connectivity to managed IT and cyber protection. We’re proud to have earned one of the best reputations in the industry and it is essential to us that we maintain that reputation as we grow. Our team is tight knit and highly talented. We trust each other to do the right thing, take responsibility, and be a champion for our collective success. We’re looking for talented, smart people to join us as we embark on this exciting period of growth. Our vision for Vorboss is to be ‘the best job that someone ever had’, regardless of how long they stay with us and promise to provide a supportive workplace based on respect and trust.

About the Role

At Vorboss, we prioritise secure, compliant, and resilient operations across our business. We are seeking a skilled Third-Party Risk Analyst to join our Security & Compliance team covering cyber security, compliance, and third-party risk. In this collaborative, stakeholder-facing role, you will be central to supporting the organisation’s risk management framework by managing third-party risk across the vendor lifecycle, supporting supply chain risk management, and facilitating customer onboarding workflows. The role requires hands-on experience with GRC tools, alongside a strong understanding of information security, cyber risk, and data protection standards.

Responsibilities

• Conduct comprehensive third-party risk assessments throughout the vendor lifecycle.
• Collaborate closely with Procurement, Security & Compliance, Sales and wider business teams to mitigate risk and ensure compliance.
• Utilise GRC tools to monitor, track, and report on third-party risk and associated remediation activities.
• Apply knowledge of information security, cyber risk, and data protection regulations (e.g., GDPR) in risk assessments and decision-making.
• Ensure third-party risk practices align with relevant industry frameworks and regulatory expectations.
• Communicate findings, recommendations, and risk mitigations effectively to stakeholders at all levels.
• Manage multiple priorities in a dynamic, collaborative environment while taking a pragmatic, risk-based approach.

Qualifications

• Education to A-level or above; relevant certifications or complementary disciplines are advantageous.

Required Skills

• Proven experience managing third-party risk in a corporate environment.
• Familiarity with GRC tools and risk assessment methodologies.
• Understanding of information security, cyber risk, and data protection requirements.
• Knowledge of industry standards, frameworks, and regulatory expectations.
• Strong communication and stakeholder management skills.
• Ability to work independently and collaboratively, managing multiple tasks and priorities effectively.

Equal Opportunity Statement

We aim to be an equal opportunities employer and we are determined to ensure that no applicant or employee receives less favourable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, or race, or is disadvantaged by conditions or requirements which cannot be shown to be justifiable. We aim to create a working environment free of bullying, harassment, victimisation, and unlawful discrimination, promoting dignity and respect for all, and where individual differences and the contributions of all staff are recognised and valued. This commitment includes training managers and all other employees about their rights and responsibilities under the equality, diversity, and inclusion policy. Responsibilities include staff conducting themselves to help the organisation provide equal opportunities in employment, and prevent bullying, harassment, victimisation, and unlawful discrimination. Vorboss promotes step-free access at our main headquarters, whilst taking into consideration physical barriers employees might face across all other sites.