Before you start: source a PGP key pair
If files will be delivered encrypted by the third-party, you must source a PGP key pair from your IT department to perform the encryption and decryption.
Give the public part of the PGP key pair to the third-party provider.