Third Party Risk Management Analyst

G MASS; Greater London; Hybrid; GBP 42,000 - 62,000; Full time

Job summary

G MASS is partnering with a global financial market infrastructure provider to strengthen its third-party risk management function.

This client-side role within the firm’s third-party risk team assesses suppliers and outsourcing arrangements across the full vendor lifecycle, from due diligence and onboarding through periodic review and exit.

Qualifications

• 1–3 years’ experience in third-party risk management, outsourcing or a related control function within financial services.
• Demonstrated analytical approach with strong attention to detail and stakeholder confidence.
• Clear, concise written communication suitable for senior audiences.

Responsibilities

• Carry out risk assessments of new and existing third parties across due diligence, onboarding, periodic review and exit.
• Review vendor evidence including questionnaires, SOC reports and policies, identifying control gaps.
• Agree remediation actions with business owners and suppliers, tracking them through to closure.
• Assign and maintain risk ratings and criticality tiering, keeping the third-party inventory and risk register accurate.
• Support outsourcing classification and concentration risk analysis in line with regulatory requirements and internal policy.
• Escalate material issues to senior stakeholders.
• Produce MI on the third-party risk profile, assessment status and outstanding findings for risk committees and governance forums.

Skills

Analytical

Attention to detail

Stakeholder management

Written communication

Tools

Excel

Job description

G MASS is partnering with a global financial market infrastructure provider to strengthen its third-party risk management function.

This is a client-side role within the firm’s third-party risk team, assessing suppliers and outsourcing arrangements across the full vendor lifecycle, from due diligence and onboarding through periodic review and exit. The work covers operational resilience, information security, financial stability and regulatory risk, with the role supporting compliance with PRA SS2/21, FCA SYSC 8, DORA and the EBA Guidelines on outsourcing arrangements.

The role suits someone with one to three years’ experience in third-party risk management, outsourcing or a related control function within financial services, who is analytical, detail-focused and confident with stakeholders. This is an initial 12 month contract role based in London

Key Responsibilities

• Carry out risk assessments of new and existing third parties across due diligence, onboarding, periodic review and exit.
• Review vendor evidence including questionnaires, SOC reports and policies, identifying control gaps.
• Agree remediation actions with business owners and suppliers, tracking them through to closure.
• Assign and maintain risk ratings and criticality tiering, keeping the third-party inventory and risk register accurate.
• Support outsourcing classification and concentration risk analysis in line with regulatory requirements and internal policy.
• Escalate material issues to senior stakeholders.
• Produce MI on the third-party risk profile, assessment status and outstanding findings for risk committees and governance forums.

• 1-3 years’ experience in third-party risk management, outsourcing, vendor management or a related risk and control function within financial services.
• Experience reviewing vendor due diligence evidence such as questionnaires and SOC reports.
• Working knowledge of PRA SS2/21, FCA SYSC 8, DORA or the EBA Outsourcing Guidelines.
• Exceptional attention to detail and strong Excel skills.
• Confident stakeholder management with business owners and external suppliers.
• Clear, concise written communication, including for senior audiences.

Contract: 12 month contract, with a view to going permanent with the end client

Hybrid working