Senior Third-Party Risk Manager

LT Harper Group; United Kingdom; Hybrid; GBP 72,000 - 120,000; Full time

Job summary

LT Harper Group is seeking a Senior Third-Party Risk Manager to lead a managed third-party risk programme for a UK regulated financial services client. The role is hybrid in the UK with up to £120,000 salary and one day a month at the UK HQ.

You will own relationships, assess supplier risk across multiple dimensions, and guide client decisions while shaping the firm’s risk management proposition.

Qualifications

• Senior third‑party risk, supply chain resilience or outsourcing assurance experience in UK regulated financial services.

Responsibilities

• Lead supply chain resilience assessments across Critical, High and Medium tier vendors.
• Run design and operating effectiveness testing for Critical and High tier vendors and defend conclusions with evidence.
• Present findings and portfolio risk to C-suite and board stakeholders, translating risk into business impact.
• Lead and develop a team of analysts, ensuring traceability of ratings and ownership of findings.
• Spot growth opportunities within the account and contribute to new business, methodology and thought leadership.

Skills

Third-party risk

Supply chain resilience

Outsourcing assurance

Client relationship

Risk reporting

Job description

Senior Third-Party Risk Manager, Supply Chain Resilience

Hybrid, UK | Up to £120,000

Hybrid, UK-based, one day a month in the UK HQ

You’ll be the named lead on a managed third-party risk programme for a UK regulated financial services client, owning the relationship and every assessment that reaches them. Working for a specialist supply chain risk and cyber resilience consultancy, your judgement on supplier risk will shape client decisions and how the firm’s proposition develops.

What you’ll actually do

• Lead supply chain resilience assessments across Critical, High and Medium tier vendors, covering security, operational resilience, data protection, exit readiness, concentration and fourth-party risk
• Run design and operating effectiveness testing for Critical and High tier vendors, and defend your conclusions with evidence
• Present findings and portfolio risk to C-suite and board stakeholders, translating technical and data protection risk into business impact
• Lead and develop a team of analysts, reviewing their work so every rating is traceable and every finding has an owner
• Spot growth opportunities within the account and contribute to new business, methodology and thought leadership

What you’ll need

• Senior third-party risk, supply chain resilience or outsourcing assurance experience in UK regulated financial services, whether in-house, consultancy or managed service
• Experience leading evidence-led control assessments using design and operating effectiveness or internal audit methodology
• Working knowledge of SS2/21, FCA operational resilience expectations, UK GDPR for processors and sub-processors, Cyber Essentials and ISO 27001
• Experience assessing supplier risk across multiple dimensions, not just IT security
• Experience owning a senior client relationship and writing risk-rated reports for senior audiences
• Confidence progressing commercial conversations without a hard sell

Nice to have

• CRISC, CISM or CISA, or working towards one
• IIA, ACCA or equivalent internal audit training
• Experience with PRA-supervised firms, plus DORA and EBA Outsourcing Guidelines knowledge