Team Lead - Vendor Risk Management - Chief Risk Office

London, United Kingdom; City Of London; On-site; GBP 80,000 - 110,000; Full time

Job summary

A leading financial services provider in London seeks a Team Lead for Vendor Risk Management. This role involves supervising a team, conducting risk assessments, and advising on third-party risks. Required qualifications include 10+ years in risk management and a relevant degree. This position offers an opportunity to influence strategic decisions and enhance vendor risk frameworks.

Qualifications

• 10+ years of experience in Risk Management or related fields, with 4+ years in leadership.
• Strong understanding of Cloud Computing risks and third-party oversight.
• Senior-level communication skills for executive presentations.

Responsibilities

• Supervise and mentor a team of Vendor Risk Managers.
• Oversee execution of risk assessments and vendor due diligence.
• Contribute to the design and implementation of the Vendor Risk Management framework.

Skills

Risk Management

Information Security

Team Leadership

Cloud Computing Risks

Data Privacy Regulations

Education

Bachelor's or Master's degree

Tools

Vendor Risk Assessment frameworks

Job description

Overview

Team Lead - Vendor Risk Management - Chief Risk Office

Location: London

Business Area: Legal, Compliance, and Risk

Vendor Risk Management (VRM) is part of the Chief Risk Office (CRO) and is responsible for assisting Bloomberg departments and select subsidiaries of Bloomberg LP in the selection, assessment, mitigation and continuous monitoring of risks introduced by vendors and other third-party service providers.

Responsibilities

• Operational Leadership
  • Supervise and mentor a team of Vendor Risk Managers, ensuring high-quality delivery of assessments, monitoring, and reporting.
  • Oversee execution of inherent risk assessments, vendor due diligence, control testing, and remediation tracking.
  • Maintain accuracy and completeness of vendor and engagement inventories, ensuring risk profiles are current and actionable.
  • Guide the team in conducting due diligence across risk domains (information security, privacy, operational resilience, concentration, regulatory, geographic).
  • Monitor industry trends and regulatory updates to ensure operational assessments reflect current risk landscapes.
• Strategic & Advisory Responsibilities
  • Contribute to the ongoing design, enhancement, and implementation of Bloomberg's Vendor Risk Management framework.
  • Serve as a trusted advisor to senior stakeholders, including business leaders, CISO, Legal, Compliance, and Enterprise Risk, on third-party risk exposure and mitigation strategies.
  • Provide risk insights and recommendations that balance business objectives with security and resilience requirements.
  • Develop and deliver actionable, executive-ready risk reporting to inform decision-making across departments.
  • Represent Vendor Risk in risk committees, working groups, and cross-functional initiatives.
  • Help shape Bloomberg's response to emerging regulatory requirements (e.g., DORA, EU AI Act, GDPR) and evolving third-party risk management expectations.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Business Management, or equivalent industry experience.
• 10+ years of experience in Risk Management, Information Security, Technology Audit, or related fields, with at least 4 years in a leadership or supervisory capacity.
• Proven experience managing and mentoring teams to deliver high-quality risk assessments and projects.
• Strong understanding of Cloud Computing risks and third-party service provider oversight.
• Familiarity with key frameworks (NIST 800-53, ISO/IEC 27001/2, COBIT, HITRUST, PCI DSS, CSA, CIS CSC).
• Deep knowledge of Data Privacy regulations (GDPR, CCPA, HIPAA) and operational resilience regulations (DORA).
• Experience leveraging Vendor Risk Assessment frameworks and tools (SIG, VSAQ, etc.).
• Ability to balance operational oversight with strategic influence, making complex business/risk trade-offs.
• Senior-level written and verbal communication skills, including the ability to present to executive audiences.
• Industry certifications (CISSP, CISA, CISM, CTPRP, CIPT/CIPP, GIAC, etc.).

Nice to have

• Experience in building and scaling a vendor risk team or function.
• Familiarity with supplier agreements, contractual terms, and service level agreements.
• Experience developing and using operational performance metrics to measure vendor risk effectiveness.
• Expertise in cloud-based IT architectures and related security practices.

How to apply

Apply if you think we're a good match. We’ll get in touch to let you know what the next steps are.