Ebury is a hyper-growth FinTech firm, named in 2021 as one of the top 15 European Fintechs to work for by AltFi. We offer a range of products including FX risk management, trade finance, currency accounts, international payments and API integration.

ABOUT OUR TEAM:

We are seeking an experienced Third Party Risk Management (TPRM) Lead to join our 2nd line of defence Information Technology (IT) and Business Resilience Team which covers business continuity and resilience, IT risk management and business process mapping. The candidate will be responsible for managing the governance, operationalization and reporting of the Outsourcing and TPRM function at Ebury. In addition to its direct colleagues, this person will be working closely with the procurement and data privacy functions.

EXPERIENCE AND QUALIFICATIONS:

• 5+ years of experience in a 2nd line of defence risk management function covering TPRM and/or IT risk management
• University degree preferred, ideally in business, information technology/ security, finance or law
• Knowledge of financial services regulatory requirements applicable to TPRM (mainly FCA, EBA, NBB) and solid understanding of the Digital Operational Resilience Act (DORA)
• Good understanding of other areas of non-financial risk management, mainly business continuity and resilience, IT risk management and data privacy
• Practical experience with GRC tools (OneTrust experience is a plus)

SKILLS:

• Strong analytical skills leveraged to build metrics, monitoring dashboards and reporting documents
• Strong written and presentation skills to effectively communicate with the relevant stakeholders (e.g. business area, internal/ external auditors, executive management)
• Ability to work in a fast-paced environment and to quickly adapt to changing priorities
• English professional proficiency (minimum C1)

As the TPRM Lead, this person will be responsible for:

• Leading Ebury´s Outsourcing and TPRM framework, covering both external and intragroup arrangements;
• Coordinating TPRM lifecycle activities involving, among others, third party segmentation and materiality assessment, risk identification and assessment, due diligence and ongoing monitoring;
• Managing reporting requirements to both internal and external stakeholders;
• Ensuring alignment with other risk management areas, mainly business continuity and resilience, and IT risk management;
• Being the point of contact for internal and external auditors with regards to Outsourcing and TPRM; and
• Continuously improving the framework in order to make it fit for purpose for Ebury while ensuring alignment with the various regulatory requirements.

LI-GC2