Lead, Third-Party Cyber Risk & Assurance

Financial Conduct Authority; Greater London; On-site; GBP 67,000 - 83,000; Full time

Benefits offered by this job

25 days annual leave

Private healthcare

Pension (8–12%)

Volunteering leave

Office working across London/Leeds/Edn

Job summary

The Financial Conduct Authority is recruiting a Third Party Cyber Risk Lead to head the FCA’s cyber assurance approach for its supplier landscape. You will provide strategic oversight, lead a team, and work with procurement, supplier management and incident management across the organisation.

Based in London with responsibilities spanning governance, risk reporting and horizon scanning, you will shape cyber risk controls for third parties and ensure effective risk management in the supplier

Qualifications

• Deep knowledge of Third Party Risk Management, supplier risk assessments, continuous monitoring and risk-based decision-making.
• Experience applying risk frameworks and translating cyber risk into actionable insights for senior stakeholders.
• Proven ability to lead and develop cyber risk capabilities and manage external assessment providers.

Responsibilities

• Act as the cyber lead for Third Party Risk Management, setting strategy and reporting to senior stakeholders.
• Lead the third-party cyber risk team across onboarding, monitoring, assessments, escalation and reporting.
• Drive improvement of third-party cyber risk processes, tooling and reporting.

Skills

Third party risk

Continuous monitoring

AI-enabled risk tools

Stakeholder management

Security leadership

Tools

NIST CSF 2.0

AI monitoring tools

Job description

The Financial Conduct Authority is recruiting a Third Party Cyber Risk Lead to head the FCA’s cyber assurance approach for its supplier landscape. You will provide strategic oversight, lead a team, and work with procurement, supplier management and incident management across the organisation.

Based in London with responsibilities spanning governance, risk reporting and horizon scanning, you will shape cyber risk controls for third parties and ensure effective risk management in the supplier