Third Party and Operational Resilience Manager

Cameron Kennedy; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

Bonus

Benefits

Hybrid work arrangement

Job summary

Central London Bank in London seeks a Senior Third Party & Operational Resilience Manager to own the third-party risk and resilience frameworks. You will report to the COO and engage with executive committees, the Board, and regulators as needed.

The role is broad in a small team, with one direct report and collaboration across the bank, suppliers and external auditors. Hybrid role with office presence required.

Qualifications

• Experience in third-party risk and vendor risk management within financial services.
• Ability to manage stakeholders and lead teams.
• Strong regulatory knowledge of PRA SS2/21, PRA SS1/21, FCA SYSC 8 and SYSC 15A.

Responsibilities

• Own the third-party management framework and policy across the full vendor lifecycle.
• Maintain outsourcing and third-party register, including materiality and criticality assessments.
• Ensure contracts meet regulatory requirements, including audit and access rights, subcontracting, incident notification and termination.
• Set and monitor SLAs and KPIs, run supplier risk assessments and test exit plans.
• Develop the operational resilience framework, covering Important Business Services, impact tolerances, mapping and scenario testing.
• Oversee business continuity, including BIAs, continuity plans, crisis management and recovery testing.
• Produce Board-level reporting and chair the Third Party & Resilience Governance Committee.

Skills

Third-party risk management

Vendor risk management

Line management

Regulatory knowledge (PRA/SYSC)

Stakeholder engagement

Communication skills

Job description

Third Party & Operational Resilience Manager
Central London | Hybrid (4 days in office) | Up to £90,000 + Bonus + Benefits
A well-established international bank in Central London is looking for a Senior Third Party & Operational Resilience Manager. The role reports to the COO. You’ll own the bank’s third-party risk and operational resilience frameworks and report to executive committees, the Board and, when needed, the regulators.

The team is small, so the role is broad. You’ll manage one direct report and work with stakeholders across the whole bank, as well as group colleagues, suppliers and external audit.
Key responsibilities

• Own the third-party management framework and policy across the full vendor lifecycle, from due diligence and contracting through monitoring to exit
• Maintain the outsourcing and third-party register, including materiality and criticality assessments, and lead preparation for the 2027 regulatory requirements on material third-party reporting
• Make sure contracts meet regulatory requirements, including audit and access rights, subcontracting, incident notification and termination
• Set and monitor SLAs and KPIs, run supplier risk assessments and test exit plans
• Develop the operational resilience framework, covering Important Business Services, impact tolerances, mapping and scenario testing
• Oversee business continuity, including BIAs, continuity plans, crisis management and recovery testing, and lead the response if a critical supplier fails
• Produce Board-level reporting and chair the Third Party & Resilience Governance Committee

About you

• At least 5 years in third-party, outsourcing or vendor risk management within UK financial services, with line management experience
• Banking experience is preferred. Candidates from other UK-regulated financial services firms will be considered if they have the same specialist expertise
• Strong, practical knowledge of PRA SS2/21, PRA SS1/21, FCA SYSC 8 and SYSC 15A, and the UK Critical Third Parties regime. Knowledge of DORA is an advantage
• Hands-on experience of business continuity and resilience testing
• The confidence to challenge senior stakeholders, with strong written and presentation skills

Please note: applicants must be fully entitled to work in the UK now and in the future, without needing visa sponsorship at any time. Sponsorship is not available for this role.

Tagged as: operational risk, third party risk, Vendor Management