Technology Supplier Governance and Resilience Manager in TECHNOLOGY OCIO

The Methodist Church in Britain; Greater London; On-site; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Non-contributory pension

Discretionary performance award

8% benefits allowance

26 days’ annual leave

Private medical insurance

Income protection

Job summary

The Bank of England is seeking a permanent Technology Supplier Risk professional within the Technology OCIO function to govern and continuously improve how technology suppliers are managed and kept resilient.

The role focuses on running the Technology Supplier Risk Framework with emphasis on cloud providers, material suppliers and outsourced services, turning policy into practical oversight and delivering robust governance, assurance and reporting.

Qualifications

• Experience with third-party suppliers, vendors or service providers.
• Experience in governance, assurance, risk management or compliance.
• Experience with Technology suppliers and services.
• Supplier due diligence and assurance reviews, including analysis of controls and evidence.
• Developing and maintaining governance processes, risk registers, dashboards and management information, interpreting regulatory and policy requirements.

Responsibilities

• Run and refine the Technology Supplier Risk Framework.
• Oversee governance and resilience of Cloud Service Providers, material suppliers and outsourced service providers.
• Keep the processes, tools, reporting and assurance activities that identify, assess and manage supplier risk.
• Turn policy and regulatory requirements into practical oversight activities.
• Review supplier risk assessments and assurance submissions, checking findings against agreed criteria.
• Assess assurance reports, certifications, business continuity plans, exit plans and financial information.
• Update reporting and dashboards on risks, control gaps, remediation actions and trends.
• Coordinate assurance work with suppliers and internal teams, and manage the actions that follow.
• Advise stakeholders and escalated supplier risks where necessary.
• Build working relationships with suppliers and senior internal stakeholders.
• Help strengthen controls and improve visibility of supplier risk across Technology.
• Support the Bank's wider operational resilience objectives.

Skills

Communication

Analytical skills

Planning & Organisation

Stakeholder management

Third-party governance

Regulatory requirements

Job description

This permanent post in the Technology OCIO function at the Bank of England oversees how Technology suppliers are governed and kept resilient. The core of the work is running and refining the Technology Supplier Risk Framework, with a focus on cloud providers, material suppliers and outsourced services. The role links Technology, Procurement, Risk and Operational Resilience colleagues, helping to mature a growing supplier management capability. Visa sponsorship is limited, and the post needs National Security Vetting, typically taking 6 to 12 weeks after offer.

What the job involves

• Run and refine the Technology Supplier Risk Framework
• Oversee governance and resilience of Cloud Service Providers, material suppliers and outsourced service providers
• Keep the processes, tools, reporting and assurance activities that identify, assess and manage supplier risk
• Turn policy and regulatory requirements into practical oversight activities
• Review supplier risk assessments and assurance submissions, checking findings against agreed criteria
• Assess assurance reports, certifications, business continuity plans, exit plans and financial information
• Update reporting and dashboards on risks, control gaps, remediation actions and trends
• Coordinate assurance work with suppliers and internal teams, and manage the actions that follow
• Advise stakeholders and escalated supplier risks where necessary
• Build working relationships with suppliers and senior internal stakeholders
• Help strengthen controls and improve visibility of supplier risk across Technology
• Support the Bank's wider operational resilience objectives

Experience

• Working with third-party suppliers, vendors or service providers
• Supporting governance, assurance, risk management or compliance activities
• Working with Technology suppliers, with understanding of Technology products and services
• Supplier due diligence and assurance reviews, including analysis of controls and evidence
• Developing and maintaining governance processes, risk registers, dashboards and management information, interpreting regulatory and policy requirements

Skills & knowledge

• Written and verbal communication with a range of stakeholders
• Analytical skills to spot trends and emerging risks and recommend mitigations
• Organisation, planning and managing competing priorities to deliver outcomes
• Building effective relationships with suppliers and senior internal stakeholders
• Strong understanding of third-party supplier governance, supplier risk, operational resilience and regulatory requirements in a regulated environment
• Knowledge of PRA Supervisory Statement SS2/21, outsourced arrangements and cloud governance practices

Checks & eligibility

• National Security Vetting clearance
• Additional Bank security checks

Other

• Knowledge of supplier management tooling, workflow systems, risk registers, dashboards or reporting platforms

Nice to have

• Experience of public procurement, or procurement in a public sector or regulated environment
• Professional qualification in supplier management, risk management or a governance discipline
• Knowledge of cloud control frameworks, cyber assurance or technology resilience standards, such as ISO or SOC reports

What’s offered

• Non-contributory career average pension at 1/80th accrual, with options to buy up or down through flexible benefits
• Discretionary performance award
• 8% benefits allowance, taken as salary or spent on flexible benefits
• 26 days' annual leave, with up to 12 more bought through flexible benefits
• Private medical insurance and income protection
• Part time and job share arrangements, with pro-rated pay and benefits