Lead Third-Party Risk & Regulatory Compliance (DORA)

Cboe Digital; New York (NY); On-site; USD 147,000 - 200,000; Full time

Job summary

Cboe Europe is seeking an experienced Outsourcing and Third Party Risk Management Lead to own the risk lifecycle from inventory to regulatory reporting, in partnership with technology, operations, procurement, legal, compliance and audit teams.

The role centers on strengthening governance and resilience for outsourcing and ICT providers across the UK and EU, with an AI-first approach to due diligence and evidence gathering.

Qualifications

• Minimum five years’ experience in outsourcing or third‑party risk management in financial services.
• Deep knowledge of DORA Chapter V, FCA PS26/2, FG26/4 and related regulatory expectations.
• Experience performing due diligence and monitoring across ICT and outsourcing arrangements.
• Ability to translate regulatory requirements into practical, first-line controls and processes.

Responsibilities

• Owns third party and ICT third party inventories, including registers and mapping to services.
• Lead risk-based due diligence, contracting, and ongoing monitoring for critical or important arrangements.
• Coordinate with Legal, Procurement, and Compliance to embed regulatory requirements and exit strategies.
• Drive automation and AI-enabled processes for due diligence, evidence gathering, and reporting.
• Support management with governance, reporting to committees, and regulatory submissions.
• Provide subject-matter guidance to business owners on onboarding, risk assessment, and approvals.

Skills

AI-driven scalability

Stakeholder management

Regulated financial servicesExperience

Strong written and verbalCommunication

Risk management and outsourcing

Job description

Cboe Europe is seeking an experienced Outsourcing and Third Party Risk Management Lead to own the risk lifecycle from inventory to regulatory reporting, in partnership with technology, operations, procurement, legal, compliance and audit teams.

The role centers on strengthening governance and resilience for outsourcing and ICT providers across the UK and EU, with an AI-first approach to due diligence and evidence gathering.