Senior Third-Party Risk Architect

mthree; Kraków; On-site; PLN 180,000 - 260,000; Full time

Job summary

mthree is seeking a Senior Third-Party Risk Management Specialist to join the Global Resilience Risk (GRR) sub-function within Group Risk & Compliance. You will be responsible for active risk stewardship and oversight of third-party risk across the enterprise.

You will advise 1LOD teams and business leads to ensure vendor, supplier, outsourcing, and concentration risks are identified, assessed, monitored, and kept within defined risk appetites.

Qualifications

• Experience in risk management at a GSIB/GSFI level.
• End-to-end Third-Party Risk Management, Vendor Management, Outsourcing Risk, and Operational Resilience.
• Familiarity with PRA, FCA, DORA, OCC/Fed guidelines.
• Understanding of operational risk taxonomies and risk appetite in matrix organizations.

Responsibilities

• Provide risk governance and oversight of third-party risk across the enterprise.
• Advise 1LOD teams and business leads on risk appetite and risk governance.
• Identify, assess, monitor, and report third-party risks (vendor, supplier, outsourcing, concentration).
• Support regulatory reporting and governance meetings (Risk Appetite Statements, Board reporting).
• Assist audit and regulatory engagements and remediation of findings.
• Foster risk culture and capability uplift across Business & Function teams.
• Escalate issues and oversee material change risk arising from changes.

Skills

Technical Communication

Stakeholder Influence

Regulatory Knowledge

Education

Bachelor's degree

Master's degree / certificates

Job description

mthree is seeking a Senior Third-Party Risk Management Specialist to join the Global Resilience Risk (GRR) sub-function within Group Risk & Compliance. You will be responsible for active risk stewardship and oversight of third-party risk across the enterprise.

You will advise 1LOD teams and business leads to ensure vendor, supplier, outsourcing, and concentration risks are identified, assessed, monitored, and kept within defined risk appetites.