Outsourcing & Third Party Risk Manager

Favia; Ireland; Remote; EUR 90,000 - 130,000; Full time

Job summary

Favia in Ireland is seeking an Outsourcing and Third Party Risk Manager to align regulatory compliance with business growth across crypto products and partnerships. You will oversee outsourced services, third-party risk governance, and regulatory submissions, collaborating with Operations, Risk, Compliance and Legal.

You will lead cross-functional groups, monitor SLAs, drive improvements, and prepare MI and board materials.

Qualifications

• Experience supporting or assessing operational control environments relating to technology governance, regulatory compliance, or operational resilience
• Understanding of EU regulatory frameworks (EMRs, MiCAR, MiFID II, PSD2, AMLD5/6, DORA, etc.)
• Deep experience in outsourcing oversight, vendor performance, and regulatory submissions
• Exceptional problem-solving, analytical, and executive communication skills
• Commercially astute - able to connect regulatory compliance with business growth and customer trust
• Ability to operate with a consulting mindset: structured, analytical, and action-oriented
• You thrive in ambiguity and moves quickly from concept to execution
• Collaborative, low-ego, and able to influence senior stakeholders
• Passionate about crypto, innovation, and responsible scaling in regulated environment

Responsibilities

• Oversee ongoing monitoring and reviews of outsourcing arrangements and third-party engagements.
• Measure provider performance against SLA and KPIs, maintaining oversight records.
• Provide timely assessment reports, trend analysis and feedback to Compliance and Risk Committee.
• Support regulatory deliverables, submissions, and communications with supervisors.
• Prepare Board materials with assessment reports, trends and MI on outsourcing oversight.
• Ensure third-party risk management policies align with regulatory standards and update for changes.
• Coordinate with Compliance, Operational Risk and audits to meet group/regulatory requirements.
• Act as contact for outsourcing queries and provide guidance to internal clients.

Skills

Regulatory compliance

Vendor management

Outsourcing oversight

Stakeholder management

Regulatory reporting

Analytical thinking

Education

Bachelor's degree or equivalent

Job description

The Team

As the global crypto market transforms under the Markets in Crypto-Assets Regulation (MiCAR) and many more regulatory frameworks, Favia is building the blueprint for how a global exchange scales compliantly - while unlocking new growth across products, markets, and partnerships.

The opportunity

We are seeking an Outsourcing and Third Party Risk Manager to help steer that evolution - a commercial, strategic operator who can connect regulatory compliance with business opportunity. The Outsourcing and Third Party Risk Manager will support the effective oversight of outsourced services and third party risk in support of regulatory initiatives across the organisation. The role will coordinate third-party governance, risk assessments, performance monitoring and remediation, while working closely with Operations, Risk, Group Vendor Management, Compliance, Legal and business teams to ensure outsourcing arrangements remain resilient, well controlled and aligned with regulatory expectations and business priorities.

Outsourcing & Third Party Risk Management

• Oversee, advise and support all parties in the performance of all ongoing monitoring and periodic reviews of Outsourcing arrangements to include Third Party engagements




• Measure performance of outsourced service providers to agreed SLA, key performance indicators and track on a regular basis and maintain records of these outsourcing oversight activities




• Ensure accurate and timely assessment reports, trend analysis and feedback is provided to the Compliance and Risk Committee




• Support regulatory deliverables, submissions, and communications with supervisors




• Support the preparation of Board and Committee materials, including timely assessment reports, trend analysis and feedback, operational MI, and outsourcing oversight reporting




• Assist in ensuring third-party risk management and outsourcing policies and procedures adhere to regulatory standards. Responsible for keeping up to date with changing regulations in relevant jurisdictions and application of knowledge to the role. Coordinate with Compliance, Operational Risk and internal /external audit to meet group and regulatory requirements




• Act as point of contact for outsourcing related queries and provide guidance and training in line with third party management and outsourcing policy, procedures and regulations to the internal clients and stakeholders




• Assess proposed new engagements and maintain records of these outsourcing oversight activities, and participate in client due diligence, RFPs or external third-party provider assessments as required




• Identify and mitigate risks associated with strategic suppliers while monitoring vendor performance against negotiated Service Level Agreements (SLAs) and Master Service Agreements (MSAs)




• Champion continuous improvement efforts by identifying process enhancement opportunities, implementing automation solutions, testing new workflows, and driving operational efficiencies




• Identify, deploy, and leverage generative AI tools (e.g., ChatGPT, Claude) to streamline workflows, automate operational processes, and enhance efficiency, decision-making, and scalability across regulatory and commercial initiatives

Cross-Functional Influence

• Act as the central point of integration between regulatory strategy and operational execution




• Lead cross-functional working groups, manage dependencies, and drive visibility across leadership on progress, risks, and opportunities




• Support commercial and product teams in understanding MiCAR constraints and opportunities when designing new offerings




• Deliver strategic updates and performance insights to executives and the board, linking regulatory progress to market positioning




• Partner closely with Group Vendor Management organization and participate maturing the Vendor Management Program

What you bring

• Experience supporting or assessing operational control environments relating to technology governance, regulatory compliance, or operational resilience




• Understanding of EU regulatory frameworks (EMRs, MiCAR, MiFID II, PSD2, AMLD5/6, DORA, etc.)




• Deep experience in outsourcing oversight, vendor performance, and regulatory submissions




• Exceptional problem-solving, analytical, and executive communication skills




• Commercially astute - able to connect regulatory compliance with business growth and customer trust




• Ability to operate with a consulting mindset: structured, analytical, and action-oriented




• You thrive in ambiguity and moves quickly from concept to execution




• Collaborative, low-ego, and able to influence senior stakeholders




• Passionate about crypto, innovation, and responsible scaling in regulated environment

Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.

Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.

We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

Our commitment

We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.

As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.