Strategic Third-Party Risk Analyst

domesticandgeneral; Wimbledon; Hybrid; GBP 45,000 - 60,000; Full time

Job summary

Domestic & General is seeking a Third Party Risk Management Analyst to operate core first-line TPRM controls across the supplier lifecycle. The role collaborates with Procurement, Risk, Compliance, Information Security, Legal and business owners to ensure complete due diligence, evidence and risk records.

The ideal candidate will handle risk assessments, maintain inventories, and produce governance information while escalating material risks and exceptions as needed.

Qualifications

• Experience in third party risk, procurement, supplier management, or regulated environments.
• Understanding of supplier lifecycle activity: due diligence, risk assessment, issue tracking, and evidence management.
• Awareness of key third party risk areas: information security, data privacy, regulatory compliance, resilience and service performance.
• Strong analytical skills to review supplier information, identify gaps and summarize findings.

Responsibilities

• Perform and support third party risk assessments for new and existing supplier engagements.
• Coordinate inputs from business owners, Procurement, Information Security, Data Privacy, Compliance, Risk and Legal to build a complete view of supplier risk.
• Review supplier information, questionnaires, documentation and control evidence to identify gaps, issues or areas needing clarification.
• Challenge incomplete, inconsistent or unsupported submissions and ensure mandatory evidence requirements are met before assessments are progressed or closed.
• Maintain accurate third-party risk records, assessment outcomes, risk ratings, evidence and action status within relevant systems and trackers.
• Maintain the central third-party inventory and Register of Information, ensuring records remain complete and updated following onboarding, reassessments, renewals and termination events.
• Monitor open findings, remediation actions and review dates, following up with accountable owners to support timely closure.
• Monitor trigger events including material service changes, incidents, ownership changes, subcontractor changes, renewals and contract amendments, initiating reassessment where required.
• Support ongoing monitoring of higher-risk or critical suppliers, including periodic reviews, issue tracking and evidence collection.
• Coordinate risk-based ongoing due diligence and periodic reassessments in line with supplier tier, criticality, materiality and ongoing monitoring requirements.
• Produce reporting, governance packs and management information on supplier risk status, assessment activity, overdue actions, key themes, exceptions and remediation progress.
• Escalate incomplete assessments, material risk concerns, overdue actions or control weaknesses to the Third Party Risk Management Manager.
• Support audit, assurance, regulatory or governance requests by collating evidence and providing accurate information on third party risk activity.
• Contribute to the maintenance of third party risk procedures, guidance, templates and process documentation.
• Identify opportunities to improve data quality, process consistency, reporting and stakeholder understanding of third party risk requirements.
• Support controlled supplier offboarding by validating completion of required TPRM activities, including record updates, evidence retention and closure of outstanding actions.
• Support third-party categorisation, materiality assessments and risk-tiering activities in accordance with approved TPRM methodologies.

Job description

Domestic & General is seeking a Third Party Risk Management Analyst to operate core first-line TPRM controls across the supplier lifecycle. The role collaborates with Procurement, Risk, Compliance, Information Security, Legal and business owners to ensure complete due diligence, evidence and risk records.

The ideal candidate will handle risk assessments, maintain inventories, and produce governance information while escalating material risks and exceptions as needed.