Senior Third-Party Risk & Compliance Analyst

FirstBank UK Limited; Greater London; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Up to 10% employer pension

Life Assurance Cover

Income protection

Private Medical Insurance

Glasses/eye testing contribution

Gym subsidy

Cycle to work scheme

Employee Assistance Program

Interest Free season ticket loan

25 days annual leave

GAYE

Job summary

FirstBank UK Limited is seeking an experienced Third Party Risk Management Analyst to support the operation, maintenance and continuous improvement of the Bank's TPRM framework in a hybrid role. You will review onboarding documentation, assess third-party arrangements, maintain records, and contribute to regulatory reporting and AI risk activities.

This hybrid position requires three days in the office with two days working from home, offering a comprehensive benefits package and opportunities

Qualifications

• Previous experience in a similar Third-Party Risk Management/vendor management role within Banking/Financial Services.
• Working knowledge of the third-party risk management lifecycle.
• Strong knowledge of PRA SS2/21 on outsourcing & TPRM, PRA SS1/21 & FCA SYSC 15A on operational resilience.
• Strong knowledge of financial crime, anti-bribery and corruption, UK sanctions, information security, cyber resilience, AI governance and operational resilience considerations relevant to third-party arrangements.
• Strong analytical thinking including quantitative & qualitative skillset.
• Strong regulatory knowledge/experience.
• Working knowledge of vendor management platforms.
• Strong stakeholder management/engagement skills with the ability to challenge & influence.

Responsibilities

• Support the ongoing operation and continuous improvement of the Bank’s Third-Party Risk Management (TPRM) framework, including procedures, templates, registers, controls and management information.
• Review and challenge third-party onboarding documentation submitted by Vendor Risk Owners, including Profiling and Tiering Assessments, due diligence questionnaires, information security questionnaires, financial crime and anti-bribery and corruption assessments and supporting approvals.
• Assist with the classification and documentation of third-party arrangements.
• Maintain and enhance the Bank’s third-party records, including the Master List of Vendors, Outsourcing Records, Material Third Party inventory, ABC Risk Register and other TPRM records.
• Support assessment of intragroup outsourcing arrangements and of arrangements where data or processing is located outside the United Kingdom, including jurisdictional, access, audit and resolvability considerations.
• Work with Vendor Risk Owners across the Bank to provide guidance, challenge and support on onboarding, due diligence, vendor reviews, risk assessments, contract information, approvals, remediation actions and exit planning
• Support maintenance of the Bank’s Material Third Party (MTP) inventory and associated regulatory reporting records.
• Support ongoing monitoring of third-party arrangements, including review of service performance, SLA/KPI information, vendor risk events, audit findings, control issues, material incidents and other trigger events.
• Support the preparation of TPRM management information for the Bank’s governance forums.
• Support regulatory horizon scanning and impact assessment for third-party risk, outsourcing, operational resilience, material third-party reporting, critical third parties, AI, cyber resilience and supply-chain risk developments.
• Assist with AI-related third-party risk activities, including identification of AI exposure, maintenance of AI vendor records, AI risk assessment support and third-party AI due diligence.
• Support financial crime screening of third parties, their owners and beneficial owners.

Skills

Third-Party Risk Management

Vendor Management

Regulatory Knowledge

Information Security

AI Governance

Operational Resilience

Stakeholder Management

Tools

Vendor management platforms

Job description

FirstBank UK Limited is seeking an experienced Third Party Risk Management Analyst to support the operation, maintenance and continuous improvement of the Bank's TPRM framework in a hybrid role. You will review onboarding documentation, assess third-party arrangements, maintain records, and contribute to regulatory reporting and AI risk activities.

This hybrid position requires three days in the office with two days working from home, offering a comprehensive benefits package and opportunities