SKILLS & EXPERIENCE

• Financial services regulatory background and knowledge (possibly also pharmaceutical) is essential
• SRM certified / CIPS qualified desirable
• Experience in a dedicated SRM or TPRM role
• Ability to perform tasks effectively within a decentralised TPRM environment
• Ability to collaborate with multiple stakeholders across a broad third-party base
• Skilled in planning, organisation, and managing varied workloads.
• Self-driven, works well with minimal supervision.
• Effective team player, manages time and stakeholder expectations efficiently.
• Highly organised with strong attention to detail.
• Strong negotiation and influencing skills
• Excellent verbal, written, and interpersonal communication.
• Strong problem analysis and resolution abilities.

ABOUT THE ROLE

The Third-Party Governance Manager oversees Just’s Third Party Risk Management (TPRM) programme, ensuring compliance with Group Procurement & Outsourcing Policy (GPOP) and regulatory standards.
This role works with business stakeholders to onboard, monitor, and manage third parties to reduce risk, and collaborates with Relationship Managers to regularly review third party performance and address risks.

RESPONSIBILITIES

• Governance frameworks and documentation: Maintain Just’s key TRPM policies and frameworks to ensure risks are well identified, managed, controlled and monitored. Update frameworks to reflect changes in regulations and taking into consideration Consumer Duty and ESG requirements. Maintain the Group Procurement and Outsourcing manual (GPOM) and seek to continuously improve the manual’s usability and clarity.
• Maintain repository of information on Third Parties: Manage Just’s contracts management and TPRM system, Gatekeeper, implementing enhancements to improve risk coverage and user adoption. Ensure quality of input and structure of data captured is useful for Third Party risk analysis and oversight.
• Support Relationship Managers (RM): RMs reside in the business and are responsible for the relationships they manage. The TPRM and Governance Manager supports the RMs in understanding their duties and setting expectations of deliverables. This include ensuring that RMs meet scheduled governance activities such as monthly, quarterly, and annual reviews, completion of due diligence questionnaires, compliance attestations, materiality assessments, and updates to the Register of Third Parties
• Risk assessment and performance management of Third Parties: Maintain risk assessment framework in order to establish criteria to identify High, Medium and Low Risk third parties. Support due diligence processes for both existing and proposed third parties. Ensure new third parties are assessed as part of the onboarding process. Facilitate annual risk reviews and ensure identified third-party risks have ownership, acceptance, or mitigation actions established. Support the business in overseeing third party performance reviews and documenting review frequency.
• Reporting and analysis: Prepare regular group-wide third-party risk reports enabling the business to understand their third party risk exposure. Analyse exposure and monitor for changes in this exposure and where risk management approaches need to evolve accordingly.