Third Party Risk & Operational Resilience Manager

Permanent | Hybrid (50/50) | London

Salary: £75,000- £85,000

A leading UK financial services organisation is looking for a Third Party Risk & Operational Resilience Manager to join their team in London.

This is an excellent opportunity for an experienced Third Party Risk Management (TPRM) professional to take ownership of the organisation’s supplier risk framework, influence operational resilience strategy, and work closely with senior stakeholders across the business.

The role offers the opportunity to play a key part in strengthening the organisation’s risk management approach within a regulated financial services environment.

The Role

Reporting into the Director of First Line Risk. The role provides subject matter expertise, oversight and challenge to business areas with third party risk responsibilities, ensuring clarity of roles, adherence to policy requirements and effective management of suppliers within approved risk appetite.

You will also support the wider Operational Resilience framework, including business continuity, incident management, resilience testing, and supplier exit planning.

Key Responsibilities

1. Own and maintain the Third Party Risk Management (TPRM) framework, policies, standards, and operating model
2. Lead supplier risk assessments, onboarding activities, and ongoing assurance reviews
3. Work with Procurement and business stakeholders to assess and manage third-party risks
4. Manage supplier segmentation and risk tiering methodology
5. Run the Third-Party Risk Forum, including reporting, governance packs, actions, and escalation
6. Monitor supplier performance, risks, incidents, and remediation activity
7. Manage third-party due diligence activities using assurance platforms such as Hellios or similar
8. Support supplier exit planning and scenario testing
9. Provide reporting and insights to senior risk stakeholders
10. Support operational resilience activities including:
11. Business continuity planning
12. Incident management
13. Service resilience
14. IT disaster recovery
15. Cybersecurity resilience
16. Participate in business incident management activities when required

About You

You will have experience in Third Party Risk Management, Supplier Risk, Outsourcing Risk, or Operational Resilience, ideally gained within a regulated financial services environment.

1. Experience managing or improving a TPRM framework
2. Understanding of UK financial services regulation, including FCA/PRA expectations on outsourcing, third-party risk management, operational resilience, and emerging regulatory developments.
3. Experience assessing third-party risk across different areas including technology, cyber, operational, and regulatory risk
4. Experience working with Procurement, IT, Cyber Security, Legal, and Compliance teams
5. Ability to challenge and influence stakeholders at different levels
6. Experience presenting risks, issues, and recommendations to senior stakeholders
7. Understanding of operational resilience principles and business continuity
8. Experience supporting incident management processes
9. Strong Microsoft Office skills, particularly Excel and PowerPoint
10. Previous experience within a small to medium-sized bank or regulated financial services organisation is essential.