Third-Party Risk Management Specialist

The Fidelis Partnership; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

The Fidelis Partnership is seeking an experienced Third-Party Risk Management Specialist in Ireland to lead end-to-end risk assessments of external suppliers in a regulated environment. You will evaluate service dependencies, coordinate due diligence, and maintain auditable records of risks, decisions and actions with multidisciplinary input from security, privacy, compliance, legal and finance teams.

You will bring strong analytical judgment, case management discipline and a track record in

Qualifications

• Experience in third-party risk, vendor risk or related disciplines.
• Experience with supplier onboarding, inherent risk assessments and ongoing monitoring.
• Experience in regulated sectors such as insurance, banking, or payments.
• Exposure to DORA, ICT third-party risk, outsourcing or operational resilience.
• Experience assessing cloud, SaaS, data, AI or other tech suppliers.
• Experience using TPRM/GRC platforms such as ServiceNow, Archer, OneTrust, Coupa Risk Assess or similar.
• Strong Excel skills; Power BI reporting is advantageous.
• Qualifications in operational risk, compliance, information security, resilience, procurement or financial services would be beneficial.
• Experience in process improvement across onboarding and due diligence processes.

Responsibilities

• Deliver evidence-based third-party risk assessments from intake through approval and exit.
• Understand supplier services, ownership structures, delivery models, locations and data dependencies.
• Coordinate corporate due diligence and supplier screening with evidence.
• Assess inherent risk and service criticality and document rationale.
• Review questionnaires, policies, certifications for completeness and relevance.
• Identify unsupported claims, gaps and remediation requirements.
• Coordinate input from Information Security, Privacy, Compliance, Legal, Risk, Finance, Resilience and Technology specialists.
• Track findings, remediation activity and outstanding actions through to completion.
• Support assessments relating to outsourcing, ICT third-party risk, cloud, SaaS and data processing.
• Produce concise risk summaries and management information using Excel, TPRM/GRC and reporting tools.
• Support development and improvement of onboarding and due diligence processes.
• Maintain auditable records of classifications, findings, decisions, owners and key dates.

Skills

Third-Party Risk Assessment

Evidence Evaluation

Risk & Control Judgement

Regulatory & Resilience Awareness

Technology & Data Literacy

Corporate Due Diligence

Case Management

Analysis & Communication

Education

Operational risk/compliance qualifications

Tools

ServiceNow

Archer

OneTrust

Coupa Risk Assess

ProcessUnity

Excel

Power BI

Job description

We are looking for an experienced Third-Party Risk Management Specialist to support the end-to-end assessment and oversight of third-party suppliers within a regulated environment.

You will be responsible for understanding supplier services and dependencies, assessing the quality of supporting evidence, coordinating specialist reviews, and maintaining clear and defensible records of risks, decisions, conditions and actions.

This role would suit an evidence-led risk professional who combines strong analytical judgement with disciplined case management and has experience working within third-party risk, operational risk, supplier risk, compliance or a related area.

Main Responsibilities

• Deliver proportionate, evidence-based third-party risk assessments from initial intake through approval, ongoing monitoring, reassessment and exit.
• Understand supplier services, ownership structures, delivery models, legal entities, locations, data use, technology dependencies and potential business impact.
• Coordinate corporate due diligence and supplier screening, including company registration, ownership and control information and supporting evidence.
• Assess inherent risk and service criticality based on the nature of each arrangement, documenting the rationale and triggering reassessment following material changes.
• Review questionnaires, policies, certifications and other supporting evidence for completeness, consistency and relevance.
• Identify unsupported claims, inconsistencies, control gaps, remediation requirements and overdue actions.
• Coordinate input from Information Security, Privacy, Compliance, Legal, Risk, Finance, Resilience and Technology specialists.
• Track findings, remediation activity, approval conditions, exceptions, risk acceptance and outstanding actions through to completion.
• Support assessments relating to outsourcing, ICT third-party risk, operational resilience, cloud, SaaS, managed services, AI and data processing.
• Produce concise risk summaries and management information using Excel, TPRM/GRC platforms and other reporting tools.
• Support the continued development and improvement of third-party onboarding and due diligence processes.
• Maintain clear and auditable records of classifications, findings, decisions, conditions, owners and key dates.

Skills

We welcome experience gained across different sectors and job titles. We are particularly interested in candidates who can demonstrate the following capabilities:

• Third-Party Risk Assessment: Ability to understand a service, identify key dependencies and apply proportionate due diligence throughout the third-party lifecycle.
• Evidence Evaluation: Strong ability to assess questionnaires, policies, SOC reports, ISO certifications, resilience testing and remediation evidence, identifying gaps or inconsistencies.
• Risk & Control Judgement: Good understanding of inherent risk, controls, residual risk, remediation, risk acceptance and escalation.
• Regulatory & Resilience Awareness: Understanding of third-party risk, outsourcing, ICT risk and operational resilience requirements within regulated environments, including exposure to DORA, FCA/PRA outsourcing requirements, EBA guidance or comparable frameworks.
• Technology & Data Literacy: Comfortable discussing SaaS, cloud, managed services, system access, data processing and cyber dependencies with relevant specialists.
• Corporate Due Diligence: Ability to interpret company identity, registration, ownership and control information, supplier screening and related evidence.
• Case Management & Auditability: Strong organisational skills with the ability to manage multiple assessments, actions, owners, deadlines and supporting evidence.
• Analysis & Communication: Ability to turn complex information into clear findings, risk summaries, management information and reporting.

Qualifications and Experience

You should ideally have:

• Previous experience within third-party risk management, vendor risk, operational risk, supplier due diligence, compliance, information security, resilience or a related discipline.
• Experience completing supplier onboarding, inherent risk assessments, due diligence, ongoing monitoring or reassessments.
• Experience within insurance, reinsurance, banking, payments or another regulated sector would be beneficial.
• Practical exposure to DORA, ICT third-party risk, outsourcing or operational resilience would be advantageous.
• Experience assessing cloud, SaaS, managed services, data, AI or other technology suppliers.
• Experience using TPRM/GRC platforms such as ServiceNow, Archer, OneTrust, Coupa Risk Assess, ProcessUnity or similar systems would be beneficial.
• Strong Excel skills, with Power BI or comparable reporting experience advantageous.
• Relevant qualifications in operational risk, compliance, information security, resilience, procurement or financial services would be beneficial.
• Experience of process improvement, particularly across supplier onboarding and due diligence processes, would be valued.

FIDELIS ETHOS

Our culture is defined by our ethos. It is the foundation of who we are and the core of everything we do.

• Results – We want to be the best at the things we care about, so we focus on profitability over volume, with responsive decision-making and clear prioritised accountability.
• Innovate – We aspire to lead the market in providing the services and products our clients need, and to drive change in the broader impact our industry has on human rights, society, and environmental sustainability.
• Include – We create an environment where employees can bring their whole self to work, with open communication where everyone, irrespective of gender, ethnicity, sexual orientation or background, feels able to contribute ideas and be recognised and rewarded for their contribution.
• Unite – We operate as team of individual talents that actively seeks to reflect the diversity of the societies in which we operate, giving our business the widest range of inputs and perspectives.
• Respond – We work in a business exposed to sudden shocks and changes – elemental, political, economic and human – so we remain nimble and ready for change.

DIVERSITY AND INCLUSION

Our vision is for a workplace culture where differences are valued and where diversity of background, experience and thought are welcomed. We believe that developing and maintaining a diverse and inclusive organisation is critical to our success. Our hiring, assessment and selection process must be fair, free from bias and one which ensures we select the right person for the job, based on merit.

We welcome applications from all qualified candidates. To ensure that all candidates have a fair opportunity to show their abilities during the recruitment process, adjustments may be required. If your physical or mental health or disability may necessitate an adjustment, please contact [e-mail] to discuss. All information relating to your health or disability will be treated in accordance with our data protection policy.