Third Party Risk & Assurance Specialist

IOVENDO; London; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a Third Party Risk & Assurance Specialist to support a Technology Transformation Programme while maintaining oversight of current operational technology. This multi-faceted role is perfect for someone with vendor management experience or equivalent practical skills in technology and security assurance. You'll develop governance frameworks, coordinate risk assessments, and ensure compliance during due diligence processes. If you're looking to grow into a Governance, Risk, and Compliance (GRC) role, this is an exciting opportunity to make a significant impact in a dynamic environment.

Qualifications

• Experience in managing third-party vendors and risk assessments.
• Strong understanding of governance and compliance frameworks.

Responsibilities

• Develop and maintain third-party governance and risk management frameworks.
• Coordinate procurement due diligence and supplier risk assessments.
• Conduct ongoing third-party risk management and monitoring.

Skills

Third Party Risk Management

Governance Frameworks

Vendor Management

Technology Assurance

Compliance Evaluation

Education

Bachelor's Degree in Finance or Related Field

Certifications in Risk Management

Job description

Join to apply for the Third Party Risk & Assurance Specialist role at IOVENDO

3 weeks ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Third Party Risk & Assurance Specialist London 3 month contract Excellent day rate

We are seeking a specialist in third party risk and assurance, with experience across various types of technology service providers. This is a multi-faceted role supporting both a Technology Transformation Programme as well as maintaining oversight over current operational technology and applications.

This role will suit someone who has managed vendors previously, or someone with equivalent practical experience in providing technology and security assurance for clients, who is looking to grow into a GRC role and potentially beyond third party risk.

Key Responsibilities

1. Develop and maintain third party governance and risk management frameworks.
2. Support the development and implementation of third party policies and governance controls with other functions, e.g., Finance, Legal, Procurement, Security, Architecture, Risk.
3. Develop technology service and operational risk considerations for supplier tier classification definitions.
4. Review existing technology supplier due diligence and work with SME functions to streamline the process.
5. Create and maintain a risk taxonomy and reference library to support third party risk identification and assessment for technology.
6. Ensure all Technology and Application change involving third parties follow policies, standards, and governance procedures, supporting various stage gate assessments including business case and design reviews, operational readiness, and service transition.
7. Coordinate procurement due diligence and supplier risk assessments.
8. Work with multiple functions to understand business use cases, and plan for timely third party due diligence and risk assessments.
9. Review and support relevant architecture and integration plans, including internal operational process change.
10. Manage inherent risk levels for prospective third-party relationships, coordinating with teams on tier classification.
11. Oversee data protection compliance during due diligence, including privacy and security requirements.
12. Evaluate third parties' compliance obligations and impact on overall compliance posture.
13. Produce and review due diligence risk reports, capturing trends and KRIs for management.
14. Support contractual negotiations and renewals, providing SME input.
15. Assist in operational readiness and risk assessments for onboarding third parties.
16. Conduct ongoing third-party risk management and monitoring, including vulnerability assessments and exit planning.
17. Develop and implement asset management and control assurance strategies, maintaining a third-party risk register.
18. Manage supplier control assurance programs, including rights-to-audit and action plan tracking.
19. Support internal risk frameworks, including risk assessments and policy exception management.
20. Oversee risk events and incident management involving third parties.
21. Prepare and present reports on third-party governance, performance, and risk.
22. Promote learning and awareness through training and research into new risk and assurance techniques.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Contract
• Job function: Accounting/Auditing and Finance
• Industry: Banking