Hybrid Third-Party Risk Lead | Strategy & Compliance

Bupa; Salford; Hybrid; GBP 64,000 - 80,000; Full time

Benefits offered by this job

25 days holiday pro rata

Wellbeing programme

Flexible working

Employee assistance programme

Workplace pension

Online discounts

Job summary

Bupa is seeking an experienced Third Party Risk Manager for a hybrid role based in Salford Quays Manchester or Kirkstall Forge Leeds. The 9-month fixed-term contract offers a salary of £64,200–£80,200 per annum, full-time 37.5 hours, with up to 3 days work from home.

You will lead the development of procurement risk strategy, ensure policy compliance, and provide MI/reports across the third-party risk landscape, supporting internal audits and governance activities.

Qualifications

• Experience in Third-Party Risk Management with supplier assurance and risk management frameworks.
• Knowledge of FCA SYSC and PRA handbook requirements.
• Understanding supply chain processes and improvement techniques.
• Desirable background in Procurement and compliance driven.

Responsibilities

• Lead development of Procurement's third-party risk management strategy and internal controls.
• Ensure compliance with Procurement and Suppliers Outsourcing policies for third party risk.
• Own risk management controls and provide MI/reports reflecting the control environment.
• Support risk factors, incident management, and governance across committees.
• Provide guidance to category teams and act as trusted advisor on third-party risks.

Skills

Third-Party Risk

Procurement risk

FCA SYSC

PRA Handbook

Supplier assurance

Strong communicator

Tools

Process Unity

Job description

Bupa is seeking an experienced Third Party Risk Manager for a hybrid role based in Salford Quays Manchester or Kirkstall Forge Leeds. The 9-month fixed-term contract offers a salary of £64,200–£80,200 per annum, full-time 37.5 hours, with up to 3 days work from home.

You will lead the development of procurement risk strategy, ensure policy compliance, and provide MI/reports across the third-party risk landscape, supporting internal audits and governance activities.