Strategic Third-Party Cyber Risk Lead

PSR Limited; Greater London; On-site; GBP 61,000 - 84,000; Full time

Benefits offered by this job

35 hours of paid volunteering annually

Private healthcare with Bupa

Non-contributory pension (8–12%)

Job summary

Financial Conduct Authority is seeking a Lead for Third Party Cyber Risk within the Cyber Assurance team. You will shape and deliver the cyber assurance approach for the FCA’s supplier landscape, providing strategic and operational leadership across monitoring, assessments, escalation and reporting.

The role requires deep knowledge of third-party risk management, strong stakeholder engagement, and the ability to translate complex cyber risks into clear business insights for senior leadership.

Qualifications

• Deep understanding of Cyber Third Party Risk Management including supplier risk assessments and continuous monitoring.
• Experience leading and refining a Third Party Cyber Risk function and operating model.
• Strong ability to translate cyber risk into actionable business insights for senior stakeholders.

Responsibilities

• Act as the FCA’s cyber lead for Third Party Risk Management, setting strategy and reporting to the CISO/CIO.
• Lead the third-party cyber risk team in delivering the cyber assurance approach across onboarding, monitoring, assessments, escalation and reporting.
• Oversee emerging third-party risks, including Agentic AI adoption and exposure management, ensuring risks are identified and managed.
• Embed cyber risk within supplier management and risk frameworks, aligning with regulatory regimes.
• Act as the cyber lead for third-party incidents, providing risk assessment and guidance for engagement and decision-making.
• Drive continuous improvement of third-party cyber risk capabilities through process and tooling enhancements.
• Manage external assessment providers and ensure quality, contract and sub-processor oversight.
• Translate complex cyber risks into clear business insights for management and committees.

Skills

Third party risk management

Strategic leadership

Stakeholder management

Risk-based decision making

Regulatory familiarity

Leadership of security professionals

Metrics and KPIs

Job description

Financial Conduct Authority is seeking a Lead for Third Party Cyber Risk within the Cyber Assurance team. You will shape and deliver the cyber assurance approach for the FCA’s supplier landscape, providing strategic and operational leadership across monitoring, assessments, escalation and reporting.

The role requires deep knowledge of third-party risk management, strong stakeholder engagement, and the ability to translate complex cyber risks into clear business insights for senior leadership.