TPRM Lead — DORA/EBA Risk & Vendor Oversight

Bybit; Vienna (VA); On-site; USD 81,000 - 128,000; Full time

Benefits offered by this job

Growth Fund

Internal Events

Global Collaboration

Career Advancement

Internal Mobility

Job summary

Bybit—a leading cryptocurrency exchange established in 2018—seeks a Senior Third-Party Risk Manager to strengthen its EU risk governance and regulatory compliance posture. The role focuses on implementing and overseeing third-party risk across regulated Austrian entities, ensuring SLAs, KRIs, and regulatory reporting are in place while collaborating with Legal, Compliance, and external providers.

You will review risk documentation, maintain TPRM systems, and train business partners on policies

Qualifications

• 3–5 years in financial services with banking regulation and procurement/outsourcing.
• Hands-on experience operating third‑party risk frameworks.
• Fluent in German and English.
• Strong stakeholder management and communication skills.
• Knowledge of DORA and EBA Outsourcing guidelines.

Responsibilities

• Support implementation, maintenance and operation of Bybit's third-party risk framework.
• Oversee third-party services and vendors across Bybit EU's regulated entities in Austria.
• Ensure SLAs, KPIs, and other metrics are in place to manage third parties.
• Review documents, prepare reports, develop MI, and handle regulatory notifications.
• Support assessment of new third-party services.
• Develop the TPRM framework including documentation, assessments, systems and tools.
• Provide first and second line review of third parties and monitor SLAs and KRIs.
• Maintain third-party portfolio and registers in alignment with regulatory requirements (e.g. DORA).
• Ensure adherence to the full Third-Party Risk lifecycle from identification to exit planning.
• Support training for business partners on TPRM policies and processes.
• Interact with Legal, Compliance, Data Protection, Technology and external regulators.

Skills

TPRM knowledge

DORA awareness

EBA outsourcing guidelines

Austrian banking act

Stakeholder management

Job description

Bybit—a leading cryptocurrency exchange established in 2018—seeks a Senior Third-Party Risk Manager to strengthen its EU risk governance and regulatory compliance posture. The role focuses on implementing and overseeing third-party risk across regulated Austrian entities, ensuring SLAs, KRIs, and regulatory reporting are in place while collaborating with Legal, Compliance, and external providers.

You will review risk documentation, maintain TPRM systems, and train business partners on policies