Senior Third Party Risk Manager

PSD Group; Greater London; Híbrido; GBP 90.000 - 120.000; Jornada completa

Descripción de la vacante

PSD Group is seeking a Senior Third Party Risk Manager / Operational Resilience in London. You will own the third-party management framework and the operational resilience model, reporting to the COO with board-level visibility and one direct report.

In this role, you will govern c.350 vendors, drive the March 2027 regulatory deadline, and chair governance committees, while coordinating with Legal, Compliance, and Group colleagues on risk, controls, and continuity.

Formación

• 5+ years' third-party/vendor management in financial services or a regulated environment.
• Line management experience.
• Strong grasp of regulatory requirements and ability to adapt as they evolve.
• Experience with change activity.
• Clear written and verbal communication to senior stakeholders.
• Degree in Business, Finance, Risk or related field (or equivalent).
• DR exposure is a bonus.

Responsabilidades

• Own the end-to-end vendor lifecycle in Gatekeeper: due diligence, contracting, onboarding, monitoring, performance, exit and termination.
• Maintain the register of third-party and outsourcing arrangements, including materiality and criticality ratings.
• Deliver the material third-party register for the March 2027 regulatory deadline, then keep it accurate going forward.
• Review contracts with Legal and Compliance for audit and access rights, data location, incident notification, subcontracting and termination provisions.
• Set and monitor SLAs and KPIs, and test exit plans for outsourced services.
• Chair the third-party and resilience governance committee and report to senior leadership and the Board.
• Act as liaison to Group colleagues on third-party matters.
• Line manage a third-party management and resilience analyst.
• Maintain the operational resilience framework and embed it into third-party processes.
• Support business leaders on Important Business Services, mapping and scenario testing.
• Oversee business continuity, including BIAs, continuity plans, crisis management and DR/recovery testing.
• Lead or support crisis response when a critical supplier fails.

Conocimientos

Vendor management

Regulatory requirements

Communication

Change activity

Leadership / line management

Educación

Degree in Business, Finance, Risk

Descripción del empleo

Job title: Senior Third Party Risk Manager / Operational Resilience

Location: London - hybrid

The role

Established, medium-sized international bank in London is hiring a second-line leader to own its third-party management framework and operational resilience model. Reporting to the COO, with Board-level reporting and one direct report, you'll be accountable for governance, performance and risk across c.350 vendors (12 critical/high risk).

Third party management (core of the role)

• Own the end-to-end vendor lifecycle in Gatekeeper: due diligence, contracting, onboarding, monitoring, performance, exit and termination
• Maintain the register of third-party and outsourcing arrangements, including materiality and criticality ratings
• Deliver the material third-party register for the March 2027 regulatory deadline, then keep it accurate going forward
• Review contracts with Legal and Compliance for audit and access rights, data location, incident notification, subcontracting and termination provisions
• Set and monitor SLAs and KPIs, and test exit plans for outsourced services
• Chair the third-party and resilience governance committee and report to senior leadership and the Board
• Act as liaison to Group colleagues on third-party matters
• Line manage a third-party management and resilience analyst

Operational resilience and BCM

• Maintain the operational resilience framework and embed it into third-party processes
• Support business leaders on Important Business Services, mapping and scenario testing
• Oversee business continuity, including BIAs, continuity plans, crisis management and DR/recovery testing
• Lead or support crisis response when a critical supplier fails

Regulatory scope

PRA SS2/21, SS1/21 and SS4/21, FCA SYSC 8 and 15A, EBA outsourcing guidelines, UK Critical Third Parties regime, and DORA for EU operations.

About you

• 5+ years' third-party/vendor management in financial services or another regulated environment, with line management experience
• Strong grasp of regulatory requirements and the ability to adapt as they evolve
• Experience with change activity
• Clear written and verbal communication, including presenting to senior stakeholders
• Degree in Business, Finance, Risk or a related field (or equivalent experience)
• DR exposure is a bonus