Risk Change Manager - Ops Resilience & Third Party Risk

Zopa; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Zopa is seeking a Risk Change Manager to elevate Operational Resilience and Third-Party Risk Management across the business. You’ll own and improve risk frameworks, collaborate with Procurement, Information Security, Data Privacy, Compliance and Legal, and translate complex regulatory requirements into practical processes.

This hands-on role requires clear thinking, strong governance, and the ability to balance risk with commercial goals in a fast-paced financial environment.

Responsibilities

• Own and improve Zopa’s first‑line frameworks for Operational Resilience and Third‑Party Risk Management, creating clearer guidance, better templates, smoother workflows and stronger governance.
• Lead practical improvements that reduce assessment time, improve the quality of risk information, clarify ownership, speed up approvals and give senior leaders better visibility of material risks.
• Own key Operational Resilience activity, including Self‑Assessment, Important Business Services, impact tolerances, dependencies, vulnerabilities and resilience testing.
• Oversee the material third‑party register, embed risk requirements into supplier processes and support ongoing monitoring, BCP and exit planning for higher‑risk suppliers.

Job description

Our Story

Hello there. We’re Zopa.

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com!

We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces.

If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa, so join us, and make it count.Want to see us in action? Follow us on Instagram @zopalife

We’re looking for a Risk Change Manager (Operational Resilience & Third Party Risk) to help make Zopa’s risk frameworks simpler, smarter and easier for the business to use.

Operational Resilience and Third-Party Risk Management are already well established at Zopa. Now we’re looking for someone to take them to the next level, improving the way we work, reducing friction, strengthening ownership and making sure our frameworks are practical, scalable and genuinely valuable.

This is a hands‑on role for someone who enjoys turning complex requirements into clear, intuitive processes. You’ll work closely with Procurement, Supplier Relationship Managers, business owners and SMEs across areas like Information Security, Data Privacy, Financial Crime, Compliance and Legal to help teams manage risk confidently and effectively.

• You’ll own and improve Zopa’s first‑line frameworks for Operational Resilience and Third‑Party Risk Management, creating clearer guidance, better templates, smoother workflows and stronger governance.
• You’ll lead practical improvements that make a real difference, reducing assessment time, improving the quality of risk information, clarifying ownership, speeding up approvals and giving senior leaders better visibility of material risks.
• You’ll also own key Operational Resilience activity, including Zopa’s Self‑Assessment, Important Business Services, impact tolerances, dependencies, vulnerabilities and resilience testing.
• On the Third‑Party Risk side, you’ll oversee the material third‑party register, embed risk requirements into supplier processes and support ongoing monitoring, BCP and exit planning for higher‑risk suppliers.

• You’re great at simplifying complex frameworks, processes or governance into practical ways of working that people actually use.
• You’ll bring strong judgement, a process design mindset and the ability to apply requirements proportionately in a fast‑paced, regulated environment.
• You’ll be comfortable learning new regulatory requirements, risk domains and technical subject matter, then translating them into effective business processes.
• You’ll also have experience in Operational Resilience and Third‑Party Risk Management, whether from a regulatory, technology or operations perspective, and be confident using data and technology to support decision‑making while balancing risk with commercial goals.

At Zopa, we want risk management to be a competitive advantage, not a blocker. You’ll join a collaborative, ambitious team that cares about doing the right thing for customers, making bold but well‑controlled choices, and focusing energy on the risks that matter most.

#LI-LK1

At Zopa we value flexible ways of working.

We value face‑to‑face collaboration and a good work‑life balance. This hybrid role requires you to come to our London office 2-3 days a week.

You’ll also have the option of working from abroad for up to 120 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one.

*Subject to having the right to work in the country of choice

Diversity Statement

Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to better products for our customers and a unique company culture for our people. We are made up of nearly 50 nationalities, have a DE& I forum made up of Zopians wanting to make a difference and we are proud of our culture where everyone can bring their full self to work. Our approach to DE& I is reflected in our hiring process so please let us know if you require any reasonable adjustments.

Our approach to AI in interviews

At Zopa, AI isn't something we're testing out — it's part of how we work every day. As a proud partner of Jobs 2030, we’re committed to building AI fluency across our workforce, and we expect Zopians to use AI as part of how they do their jobs.

Because of that, we want to be transparent about how we think about AI use during our hiring process.

Behavioural and competency-based interviews: pleasedon'tuse AI. These conversations are designed to understandyou— your experiences, your judgment, and howyou'veapproached real situations. An AI-generated answer can'ttell us that. What it can do is get in the way of us finding out whetherwe'rethe right fit for each other.

Technical interviews: it depends on the role.Some technical stages actively welcome AI use,othersdon't. Your Talent Partner will let you knowwhat'sexpected at each stage.Where AI is part of the assessment,we'llbe interested not just in the outcome, but in how you used it – the tools you chose, your reasoning, and the decisions you made along the way.