AI-Driven Third-Party Risk Lead

Cboe Global Markets, Inc.; Greater London; On-site; GBP 100,000 - 140,000; Full time

Job summary

Cboe Europe is seeking an experienced Outsourcing and Third Party Risk Management Lead to take first-line ownership of how the firm identifies, assesses, and manages risks arising from outsourcing, ICT, and other third party providers.

You will own the first-line risk lifecycle—inventory, due diligence, contracting, monitoring, exit planning, and regulatory reporting—while embedding DORA and FCA PS26/2 requirements.

Qualifications

• Minimum five years in outsourcing/TPRM within a regulated financial services environment.
• Experience with DORA and FCA/PRA outsourcing expectations.
• Ability to translate regulatory requirements into operational processes and controls.
• Excellent written and verbal communication with engineers, product owners and vendors.
• AI-enabled or AI-driven due diligence and evidence gathering experience is a plus.

Responsibilities

• Own the third party and ICT third party inventory, including registers and mapping to services, data and controls.
• Lead risk-based due diligence, contracting, and onboarding for third party relationships.
• Coordinate extensive monitoring, regulatory reporting, and remediation tracking across the first line of defence.
• Embed DORA Chapter V requirements and FCA PS26/2/FG26/4 into operational processes and controls.
• Collaborate with Technology, Operations, Legal, Procurement and Product to mature the control framework.
• Support senior management with governance, risk oversight, and reporting to committees and auditors.

Skills

Outsourcing

Third party risk management

Regulatory reporting

DORA

Stakeholder management

Job description

Cboe Europe is seeking an experienced Outsourcing and Third Party Risk Management Lead to take first-line ownership of how the firm identifies, assesses, and manages risks arising from outsourcing, ICT, and other third party providers.

You will own the first-line risk lifecycle—inventory, due diligence, contracting, monitoring, exit planning, and regulatory reporting—while embedding DORA and FCA PS26/2 requirements.