Strategic Third-Party Cyber Risk Lead

Financial Conduct Authority; Leeds; On-site; GBP 61,000 - 83,000; Full time

Benefits offered by this job

25 days annual leave

Private healthcare with Bupa

Non-contributory pension

Life assurance

Office-based with flexible hours in UK

Job summary

Financial Conduct Authority seeks a Third Party Cyber Risk Lead to shape and deliver cyber assurance for the FCA’s supplier landscape. You will lead continuous monitoring, risk-based assessments and escalation, working with Procurement, Supplier Management and Incident Management to manage third-party cyber risk.

You will drive improvements in tooling, reporting and KRIs, ensuring effective control across external partners and regulatory expectations.

Qualifications

• Experience in third-party risk management and supplier risk assessments.
• Ability to translate cyber risks into business insights for stakeholders.
• Experience leading and developing security professionals.

Responsibilities

• Act as the FCA’s cyber lead for Third Party Risk Management, setting strategy and risk reporting.
• Lead the third‑party cyber risk team across onboarding, monitoring, assessments and escalation.
• Oversee emerging third‑party risks including AI adoption and exposure management.
• Embed cyber risk within supplier management and risk frameworks across FCA and regulators.
• Act as cyber lead for third‑party incidents and support senior decision-making.
• Drive continuous improvement of third‑party cyber risk capabilities and reporting.
• Manage external assessment providers and ensure delivery quality and oversight.
• Translate complex cyber risks into clear business insights for management.
• Build relationships promoting a collaborative risk-based assurance model.

Skills

Third Party Risk Management

Cyber risk tools

Stakeholder communication

Tools

AI-enabled risk tools

Job description

Financial Conduct Authority seeks a Third Party Cyber Risk Lead to shape and deliver cyber assurance for the FCA’s supplier landscape. You will lead continuous monitoring, risk-based assessments and escalation, working with Procurement, Supplier Management and Incident Management to manage third-party cyber risk.

You will drive improvements in tooling, reporting and KRIs, ensuring effective control across external partners and regulatory expectations.