Third Party Risk Manager (f/m/d) Berlin, Berlin, Germany

Raisin GmbH; Berlin; Vor Ort; EUR 90.000 - 150.000; Vollzeit

Benefits dieser Stelle

Employee Development Budget

Flexible working hours

Home office

Company pension scheme

Urban Sports Club membership

Deutschland Ticket subsidy

JobRad bike leasing

Snacks and fruits at the office

Relocation support

Zusammenfassung

Raisin GmbH in Berlin is seeking a Senior Leader for Third-Party Risk Management within the TPRM team. You will oversee outsourcing governance, vendor risk oversight, and regulatory compliance across the group, coordinating with Legal, Procurement, and Control Functions.

You will drive risk assessments, set frameworks, and lead cross-functional initiatives to safeguard operational resilience and regulatory alignment while reporting to the Management Board.

Qualifikationen

• Senior-level experience in third-party risk management within regulated financial services.
• Hands-on experience with material outsourcing and ICT service providers.
• Familiarity with MaRisk AT 9, EBA Outsourcing Guidelines, and DORA.
• Understanding ICT services, operational resilience, business continuity, subcontracting, and fourth-party risk.
• Skilled in applying risk assessment frameworks, managing assurance activities, tracking KPIs/KRIs, and audit findings.
• Fluent in English; German language skills are a strong advantage.

Aufgaben

• Act as deputy to the TPRM function lead, coordinating priorities, quality assurance, and representing the team in senior and cross-functional forums.
• Own and evolve core frameworks, policies, and standards for Third Party Risk Management across the group.
• Lead third-party risk assessments from pre-assessment to onboarding and lifecycle review, ensuring regulatory alignment and meaningful challenge.
• Collaborate with Control Functions to identify risks, define mitigations, and elevate “showstopper” concerns where necessary.
• Monitor third-party performance and compliance through KPIs, SLAs, control testing, incident tracking, and business continuity reviews.
• Support contractual risk oversight in coordination with Legal and Procurement, ensuring identified risks are appropriately mitigated.
• Advise on and review changes to outsourcing arrangements, including scope updates, subcontracting, and exit strategies.
• Contribute to regulatory and Management Board reporting, including disclosures related to material outsourcing and ICT providers.
• Oversee development of exit plans and contingency strategies for critical third parties, and support operational resilience initiatives.

Kenntnisse

Third-Party Risk Mgmt

Outsourcing Governance

Vendor Risk Oversight

Regulated Finance

Risk Assessment

Tools

MaRisk AT 9

EBA Outsourcing Guidelines

DORA

Jobbeschreibung

Raisin is the world’s leading platform for savings and investment products. Founded in 2012, theFinTech connects consumers with banks in the EU, the UK and the US. This gives consumers better interest rates and banks a diversified form of refinancing. Our vision is to offer savings and investments without barriers and thus open up the global 160 trillion euro market.

Raisin currently employs more than 800 people from over 75 countries worldwide. Today, the platform holds over 80 billion euros in assets frommore than one million investors which have accrued over 5 billion euros in returns.

Team

The Third Party Risk Management (TPRM) team is part of our Compliance function and plays a central role in safeguarding Raisin Bank’s operational resilience. As a Second Line of Defense team, we define, maintain, and oversee group-wide standards and controls related to third-party risk.

Our team operates at the intersection of compliance, technology, legal, and operational governance, ensuring that outsourcing and vendor partnerships across the Raisin Group meet the highest regulatory and risk management standards. We foster a collaborative, detail-oriented, and ownership-driven culture. Diversity of thought, inclusive leadership, and cross-functional collaboration are essential to our impact.

Your Responsibilities

• Act as deputy to the TPRM function lead, coordinating priorities, quality assurance, and representing the team in senior and cross-functional forums.
• Own and evolve core frameworks, policies, and standards for Third Party Risk Management across the group.
• Lead third-party risk assessments from pre-assessment to onboarding and lifecycle review, ensuring regulatory alignment and meaningful challenge.
• Collaborate with Control Functions to identify risks, define mitigations, and elevate “showstopper” concerns where necessary.
• Monitor third-party performance and compliance through KPIs, SLAs, control testing, incident tracking, and business continuity reviews.
• Support contractual risk oversight in coordination with Legal and Procurement, ensuring identified risks are appropriately mitigated.
• Advise on and review changes to outsourcing arrangements, including scope updates, subcontracting, and exit strategies.
• Contribute to regulatory and Management Board reporting, including disclosures related to material outsourcing and ICT providers.
• Oversee development of exit plans and contingency strategies for critical third parties, and support operational resilience initiatives.

Your Profile

• Senior-level experience in Third Party Risk Management, outsourcing governance, vendor risk oversight, or comparable risk and compliance roles within regulated financial services.
• Hands‑on experience with material outsourcing and/or critical ICT service providers.
• Deep familiarity with MaRisk AT 9, EBA Outsourcing Guidelines, and DORA (Chapter V), including practical implementation across functions.
• Understanding of ICT services, operational resilience, business continuity, subcontracting, and fourth-party risk.
• Skilled in applying risk assessment frameworks, managing assurance activities, reviewing KPIs/KRIs, and tracking audit findings.
• Comfortable working independently, owning complex risk topics, and engaging effectively with senior stakeholders.
• Experience leading initiatives or workstreams, supporting colleagues, and acting as a deputy or backup in a compliance or risk context.
• Able to challenge first line decisions constructively, elevate where needed, and contribute to residual risk decisions at senior level, including Management Board discussions.
• Strong analytical thinking, attention to detail, and risk-based judgment, combined with effective communication and stakeholder management skills.
• Fluent in English (required); German language skills are a strong advantage.

Join our mission, join our team – and grow with us!

At Raisin, we care about each other and it is one of our top priorities to foster an open and caring environment in which everyone feels welcome and comfortable. Our culture is strongly driven by our ambitious team, which connects more than 75 different nationalities.

• Employee Development Budget of €2,000 and four full training days per year.
• Flexible working hours, home office and 30 vacation days.
• A company pension scheme (Betriebliche Altersvorsorge), which we support with 20%.
• Enjoy more than 50+ different sports with Urban Sports Club: We subsidize your membership with more than €20 per month.
• Do you miss being in the office? The Deutschland Ticket gets you there, which we subsidize with €25 per month.
• Love cycling? With JobRad, lease the bike of your choice and enjoy tax savings, plus Raisin covers your monthly insurance costs.
• Hungry all the time? Snacks, daily fresh fruit as well as drinks provided at the office.
• You are moving from another country or city to join us? We may support your relocation.

We value diversity and the unique experiences each individual brings. If you’re excited about this role but don’t meet every requirement, we still encourage you to apply.

We are an equal opportunity employer and are committed to creating an inclusive environment for everyone, regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or gender identity.