VP Third Party Risk Management Lead

Morgan McKinley; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Morgan McKinley is seeking an experienced Third-Party Risk Management professional to maintain and improve the TPRM framework across jurisdictions. The role focuses on reporting to committees and boards and driving continuous governance improvements.

You will develop robust supplier risk metrics, author policy documents, and engage cross-functionally to embed regulatory changes into the framework.

Qualifications

• Experience maintaining third-party risk management programmes across multiple jurisdictions.
• Ability to develop metrics for supplier risk and governance reporting.
• Strong communication skills for informing committees and boards.

Responsibilities

• Maintain and review the TPRM framework to meet regulatory and internal standards.
• Oversee reporting for KIs, risk appetite, committee decks and board submissions.
• Manage RCSA, Issues & Actions, and control testing activities.
• Develop TPRM metrics and thresholds for tier 1/2 suppliers for monitoring risk.
• Author and manage TPRM policy documents and related standards.

Skills

TPRM framework

Regulatory reporting

Governance and controls

Stakeholder management

Change project delivery

Tools

Policy documentation

RCSA & risk control testing

Job description

You will be instrumental in maintaining the integrity of the TPRM framework. Your day-to-day activities will involve collaborating closely with first- and second-line functions such as Operational Risk, Enterprise Risk, Resiliency teams, BCS colleagues, and other key stakeholders. You will take ownership of reporting processes, ensuring timely delivery of critical information to committees and boards and drive continuous improvement through regular reviews of applicable regulations. By developing robust metrics for supplier risk assessment and authoring comprehensive policies, you will help shape how third-party risks are managed across the entities. Your consultative approach will foster knowledge sharing throughout the organisation while your project management skills enable successful delivery of change initiatives. Success in this role requires proactive engagement with regulatory developments, effective communication strategies for disseminating expertise internally, and a commitment to upholding high standards of governance.

• Maintain and continuously review the Third-Party Risk Management framework to ensure it meets both regulatory requirements and internal standards across multiple jurisdictions.
• Support all reporting requirements for the TPRM function including Key Indicator metrics, Risk Appetite metrics, Committee decks, Board reporting, ad-hoc requests, and Head Office submissions.
• Manage the function’s Risk Control Self-Assessment (RCSA), Issues and Actions programme as well as control testing and delegated controls to uphold robust governance.
• Develop appropriate TPRM metrics and thresholds for tier 1 and tier 2 suppliers to ensure effective monitoring of third party risks.
• Author and manage TPRM policy documents along with related standards to provide clear guidance for stakeholders throughout the organisation.
• Ensure regulatory compliance by keeping abreast of all relevant requirements covering reporting and notifications for both the bank
• Conduct regulatory horizon scanning to identify emerging risks or new regulations and embed these into the current TPRM framework proactively.
• Own projects related to TPRM change initiatives by partnering with other departments such as Procurement & Vendor Management or subject matter experts as needed.
• Act in a consultative capacity providing advice and guidance to stakeholders on best practices in third party risk management.
• Communicate TPRM knowledge effectively across the business to build a centre of expertise while developing stakeholder management strategies.