Senior Associate, Third Party Risk Management

0026 Checkout Technology Ltd; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

0026 Checkout Technology Ltd is seeking a qualified individual to lead operational aspects of Third-Party Risk Management within the London TPRM team. The suitable candidate will coordinate assessments and manage interactions between offshore and onshore teams.

Four years of relevant experience, particularly in a Big4 firm, along with a strong grasp of risk management principles, are essential. This role offers significant opportunities for influence and impact within the organization.

Qualifications

• 4+ years experience in Third‑Party Risk Management (TPRM), risk management, or related operational control.
• Experience at a Big4 (Deloitte, EY, PwC, KPMG) or similar consulting firm.
• Proven experience as a process gatekeeper, especially in Quality Assurance.

Responsibilities

• Act as daily point of contact for the Offshore TPRM Operations Team.
• Lead the Quality Control (QC) process for all assessments.
• Monitor operational performance against defined SLAs and KPIs.
• Coordinate assessment initiation with Procurement and Business Owners.

Skills

Third‑Party Risk Management

Quality Assurance

Interpersonal skills

Organizational skills

Tools

GRC/TPRM platform

Job description

Job Overview

This role is centred on execution quality, operational leadership, and cross‑functional coordination within the London TPRM team structure.

Responsibilities

• Act as the primary daily point of contact and operational supervisor for the Offshore TPRM Operations Team, ensuring accurate and timely execution of all third‑party risk assessments and due diligence activities.
• Lead the Quality Control (QC) process for all assessments delivered by the offshore team, ensuring outputs are consistent, align with established methodologies, and are fully audit‑ready.
• Monitor the operational performance of the offshore team against defined SLAs and KPIs.
• Conduct third‑party assessments to support the team when required.
• Coordinate Assessment Initiation with Procurement and Business Owners to ensure assessments are initiated at the correct phase of the third‑party lifecycle.
• Coordinate triage and review process with internal risk SMEs to ensure high‑risk assessments receive appropriate specialized review and sign‑off.
• Serve as the operational point of contact for onshore internal risk teams regarding findings and remediation requirements.
• Oversee governance and standardization of ongoing supplier performance monitoring activities.
• Coordinate with Business Owners and Procurement to collect and review performance data, and integrate significant performance failures into the overall risk profile.
• Flag critical performance issues for risk review and incorporate them into continuous monitoring plans.
• Act as the primary escalation point for high‑risk findings, bottlenecks, and non‑compliance issues.
• Define, drive, and track remediation plans with Business Owners and Procurement, ensuring mitigation steps are completed within timelines.
• Serve as liaison for the 2nd Line of Defense (Risk Oversight), compiling and delivering operational data, metrics, and commentary on coverage and control effectiveness.
• Support preparation of reports and presentations on TPRM metrics, trends, and program effectiveness for leadership and Risk Committees.
• Assist in the implementation, configuration, and maintenance of the TPRM system/tool, ensuring data integrity across the platform.

Qualifications

• 4+ years dedicated experience in Third‑Party Risk Management (TPRM), risk management, compliance, or a related operational control function.
• Prior experience at a Big4 (Deloitte, EY, PwC, KPMG) or a similar major consulting firm is highly desirable.
• Proven experience acting as a process gatekeeper or reviewer, particularly in Quality Assurance for risk or compliance deliverables.
• Demonstrated success coordinating delivery and information flow between offshore/remote teams and onshore stakeholders.
• Strong organizational and interpersonal skills, with the ability to manage expectations and articulate complex operational risks clearly.
• Solid understanding of TPRM principles and risk domains (InfoSec, BCP, ABAC, etc.) and prior experience supporting the administration or maintenance of a GRC/TPRM platform.