Vendor Risk Management - Third Party Risk Oversight - Program Lead - Chief Risk Office

Bloomberg L.P.; Greater London; On-site; GBP 100,000 - 125,000; Full time

Job summary

A leading financial information company in London is seeking a Third Party Risk Oversight Lead to drive the implementation of their third-party risk framework. The ideal candidate will have extensive experience in risk management, information security, and a deep understanding of compliance regulations. Responsibilities include establishing risk standards, collaborating with cross-functional teams, and ensuring the framework adapts to regulatory changes. This role offers an opportunity to work in a dynamic environment that values diversity and innovation.

Benefits

Diversity and Inclusion programs

Opportunities for community engagement

Training and development resources

Qualifications

• Bachelor's or Master's degree in Risk Management, Information Security, Business Administration, or equivalent.
• Extensive experience in Risk Management or related fields.
• Strong understanding of third-party risk management processes.

Responsibilities

• Drive the design and implementation of the third-party risk framework.
• Set standards and processes for vendor risk analysis.
• Collaborate with stakeholders to ensure framework responsiveness.

Skills

Risk Management

Information Security

Governance

Communication skills

Education

Bachelor's or Master's degree in Risk Management or related fields

Tools

NIST 800-53

ISO/IEC 27001/2

COBIT

CISSP

Job description

Vendor Risk Management - Third Party Risk Oversight - Program Lead - Chief Risk Office

Location

London

Business Area

Legal, Compliance, and Risk

Ref #

10047529

Description & Requirements

The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open, just like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen.

Bloomberg’s Chief Risk Office (CRO) Department plays a critical role in supporting our businesses and operations around the world. We move quickly and thoughtfully to help address the risks that are inherent with being the world’s leading financial news and information company. Our team is made up of talented and hardworking professionals who think creatively and work collaboratively in an open environment to deliver results, drive innovation, and solve difficult problems. Diversity and inclusion are essential to our success, and we strive to maintain an environment where our employees are empowered to make an impact. We also recognize the value of diversity and inclusion in cultivating a supportive workplace and the importance of giving back to our communities.

The CRO team provides coverage of both Bloomberg's regulated entities and products, and Bloomberg's non-regulated products and services. Our focus is to address risks and related issues by providing risk management as a service, focusing on providing and delivering value to help businesses and departments thoughtfully incorporate risk into decision making.

Vendor Risk Management (VRM) or third-party risk is part of the Company’s Chief Risk Office (CRO) and responsible for assisting Bloomberg departments and select subsidiaries of Bloomberg LP in the selection, assessment, mitigation, and continuous monitoring of risks introduced by vendors and other third-party service providers.

What’s the Role?

We are seeking a Third Party Risk Oversight Lead to drive the design, implementation, and continuous improvement of Bloomberg’s third-party risk framework. This individual contributor role is critical to ensuring that our vendor risk methodology provides comprehensive coverage across the vendor lifecycle, as well as across risk types, and aligns with Bloomberg’s broader enterprise risk framework.

You will help set the standards and processes that our team of vendor risk analysts follow. You will collaborate with cross-functional stakeholders to define assessment standards, translate that into actionable processes, and generally ensure our framework remains responsive to evolving regulatory expectations and business needs. This role requires a strategic mindset, deep subject matter expertise, and the ability to translate complex risk concepts into actionable guidance for our operational teams.

We’ll Trust You To:

Framework Design & Governance

• Lead the development and refinement of Bloomberg’s third-party risk framework, ensuring alignment with enterprise risk management principles.
• Define and maintain risk coverage standards across the vendor lifecycle, including onboarding, due diligence, monitoring, and offboarding.
• Establish thematic risk assessment methodologies to streamline risk identification and reporting across similar vendor types or services.
• Ensure the framework supports consistent evaluation across key risk domains (e.g., Information Security, Privacy, BCP/DR and Exit Planning, Regulatory, Geographic, ESG etc).

Stakeholder Engagement & Advisory

• Partner with business units, Legal, Compliance, Enterprise Risk, and CISO teams to ensure the framework meets subject matter experts’ needs.
• Serve as a subject matter expert on third-party risk governance, providing guidance on emerging risks and regulatory developments (e.g., DORA, EU AI Act, GDPR).
• Support the development of executive-ready reporting and risk dashboards that reflect framework coverage and effectiveness.
• Represent Vendor Risk in cross-functional working groups, risk committees, and regulatory response initiatives.

Continuous Improvement & Enablement

• Monitor industry trends and regulatory changes to proactively update framework components and guidance.
• Collaborate with operational VRM teams to ensure consistent application of the framework and identify opportunities for simplification or enhancement.
• Develop training materials and documentation to support adoption and understanding of the framework across the organization.

You’ll Need to Have:

• Bachelor’s or Master’s degree in Risk Management, Information Security, Business Administration, or equivalent industry experience.
• Extensive experience in Risk Management, Information Security, Technology Audit, or related fields, with a focus on governance, frameworks, or policy development.
• Strong understanding of third-party risk management principles and lifecycle processes.
• Familiarity with key frameworks (NIST 800-53, ISO/IEC 27001/2, COBIT, HITRUST, PCI DSS, CSA, CIS CSC).
• Deep knowledge of Data Privacy regulations (GDPR, CCPA, HIPAA) and operational resilience regulations (DORA).
• Experience designing or implementing risk frameworks, governance models, or control standards.
• Excellent written and verbal communication skills, including the ability to influence and advise senior stakeholders.
• Industry certifications (CISSP, CISA, CISM, CTPRP, CIPT/CIPP, GIAC, etc.).
• *Please note we use years of experience as a guide but we certainly will consider applications from all candidates who are able to demonstrate the skills necessary for the role.

We’d Love to See:

• Experience aligning third-party risk frameworks with enterprise risk management programs.
• Familiarity with vendor risk platforms and assessment tools (e.g., SIG, VSAQ).
• Experience responding to regulatory inquiries or audits related to third-party risk.
• Ability to translate complex risk concepts into practical guidance and tools.

Discover what makes Bloomberg unique - watch our for an inside look at our culture, values, and the people behind our success.

Bloomberg is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg is a disability inclusive employer. Please let us know if you require any reasonable adjustments to be made for the recruitment process. If you would prefer to discuss this confidentially, please email [e-mail]