About the job

You will be instrumental in maintaining the integrity of the TPRM framework. Your day-to-day activities will involve collaborating closely with first- and second-line functions such as Operational Risk, Enterprise Risk, Resiliency teams, BCS colleagues, and other key stakeholders. You will take ownership of reporting processes, ensuring timely delivery of critical information to committees and boards and drive continuous improvement through regular reviews of applicable regulations. By developing robust metrics for supplier risk assessment and authoring comprehensive policies, you will help shape how third-party risks are managed across the entities. Your consultative approach will foster knowledge sharing throughout the organisation while your project management skills enable successful delivery of change initiatives. Success in this role requires proactive engagement with regulatory developments, effective communication strategies for disseminating expertise internally, and a commitment to upholding high standards of governance.

• Maintain and continuously review the Third-Party Risk Management framework to ensure it meets both regulatory requirements and internal standards across multiple jurisdictions.
• Support all reporting requirements for the TPRM function including Key Indicator metrics, Risk Appetite metrics, Committee decks, Board reporting, ad-hoc requests, and Head Office submissions.
• Manage the function’s Risk Control Self-Assessment (RCSA), Issues and Actions programme as well as control testing and delegated controls to uphold robust governance.
• Develop appropriate TPRM metrics and thresholds for tier 1 and tier 2 suppliers to ensure effective monitoring of third party risks.
• Author and manage TPRM policy documents along with related standards to provide clear guidance for stakeholders throughout the organisation.
• Ensure regulatory compliance by keeping abreast of all relevant requirements covering reporting and notifications for both the bank
• Conduct regulatory horizon scanning to identify emerging risks or new regulations and embed these into the current TPRM framework proactively.
• Own projects related to TPRM change initiatives by partnering with other departments such as Procurement & Vendor Management or subject matter experts as needed.
• Act in a consultative capacity providing advice and guidance to stakeholders on best practices in third party risk management.
• Communicate TPRM knowledge effectively across the business to build a centre of expertise while developing stakeholder management strategies.