Third Party Risk Officer

📋 Description

• • Own the end-to-end execution of third-party and outsourcing risk assessments, criticality reviews and due-diligence cycles for a global, multi-award-winning trading platform that is scaling at speed. You will be the operational engine that keeps our risk register accurate, current and audit-ready.
• • Coordinate directly with business owners, procurement, legal, compliance and technology teams to maintain a living inventory of every vendor, cloud provider, data processor and outsourcer across the Group. You will ensure that risk ratings, residual exposures and action plans are never more than one click out of date.
• • Roll out and embed the Group’s third-party and outsourcing risk framework under the guidance of the Third Party Risk Manager. This includes configuring and maintaining risk tools, templates, trackers and workflow engines so that every team—from marketing to infrastructure—follows the same gold-standard process.
• • Prepare crisp governance packs, MI dashboards and status updates for senior forums such as the Operational Risk Committee, Outsourcing Committee and Board sub-committees. Your data visualisations will turn complex risk data into decisions that protect millions of client accounts and billions in daily trading volume.
• • Execute periodic control testing, quality assurance reviews and KPI/KRI/SLA monitoring to verify that vendors are performing within appetite. You will log exceptions, track remediation and escalate overdue actions through a clearly defined path to resolution.
• • Maintain the company’s Register of Information in line with DORA, EBA and FCA expectations, ensuring that regulatory submissions are accurate, complete and delivered ahead of deadline.
• • Act as the first point of contact for business teams who need guidance on risk assessments, policy interpretation or tool troubleshooting. You will run training sessions and awareness campaigns that turn risk management from a compliance checkbox into a competitive advantage.
• • Identify process inefficiencies and propose automation or workflow enhancements that reduce cycle time without weakening control. Your ideas will directly influence the roadmap of our GRC tooling and the design of next-generation risk dashboards.
• • Support incident response when a third-party control breach or service outage occurs. You will coordinate root-cause analysis, document lessons learned and update the risk framework so the same gap never appears twice.
• • Contribute to regulatory exams, internal audits and client due-diligence questionnaires by providing evidence packs, risk narratives and metric deep-dives that showcase a mature, transparent and continuously improving risk culture.
• • Foster a culture of curiosity and continuous improvement by benchmarking our practices against industry peers, attending working groups and feeding emerging regulatory guidance back into policy updates.
• • Champion diversity of thought and cross-functional collaboration, ensuring that risk insights are shared early and decisions are made with the full picture in mind.