Head of Third Party Risk Management in London

A senior member of the Operations team, this exciting new role will be responsible for shaping the Group’s Third-Party Risk Management (TPRM) strategy, framework and operating model across Enstar Group. The role is accountable for the ongoing development of a scalable and risk-based TPRM framework that supports the organisation’s strategic objectives and regulatory obligations. Acting as the Group subject matter expert for third-party risk management, the role requires close partnership with Heads of Functions across Procurement, Compliance, Enterprise Risk (Head of Operational Risk), Information Security, Legal, IT, Operational Resilience, Investments and business service owners to ensure third-party risk considerations are embedded into day-to-day decision making and operational processes. As well as working with peers, the role will need to closely engage with Regional COOs and Group Execs.

The role will be responsible for an Enstar Group function and operates within a Group federated risk and control model, working closely with specialist risk and control functions to ensure relevant domain expertise, standards and regulatory requirements are effectively integrated into third-party governance, assessment and oversight processes. The role will also play a key role in the implementation and optimisation of TPRM technologies, tooling and data capabilities to support improved oversight, workflow management, reporting and risk insight. This is a highly visible, hands-on first line of defence leadership role requiring strong judgement, stakeholder influence, operational credibility and the ability to translate policy and framework requirements into practical business outcomes.

What you will be doing:

• Group Third-Party Risk Strategy & Framework
  • Own and evolve the Group-wide Third-Party Risk Management strategy, framework and operating model across all categories of third-party relationships.
  • Drive the continued maturity and embedding of TPRM capabilities across all business areas.
  • Will be accountable for a small Department with responsibility for Departmental strategy.
  • Establish proportionate governance models which recognise differing third-party relationship structures, risk profiles and business operating models.
  • Deliver continuous improvement of TPRM methodologies, controls, standards and lifecycle processes.
• Third Party Oversight & Risk Management
  • Provide enterprise-wide oversight and coordination of third-party risk activities throughout the lifecycle of third-party relationships.
  • Support the effective management of risks associated with suppliers, TPAs, investment managers, outsourced service providers and other external partners, through collaboration with specialist teams.
  • Lead approaches relating to material outsourcing, critical third parties, concentration risk, fourth party exposure and operational dependencies.
  • Ensure robust due diligence, risk assessment, monitoring, issue management and escalation processes are embedded across the organisation.
  • Support business stakeholders and service owners in making informed, risk-based decisions relating to third-party engagements and outsourcing arrangements.
  • Deliver meaningful management information, reporting and insight to support effective oversight and decision making.
• Governance & Regulation
  • Ensure alignment of TPRM practices with evolving regulatory expectations, operational resilience requirements and industry best practice.
  • Manage Governance and reporting processes relating to outsourcing, critical third parties and material external relationships.
  • Coordinate cross-functional risk input into third-party assessment, governance and oversight activities.
  • Ensure effective integration of Operational Resilience, Information Security, Legal, Compliance and other specialist risk domain requirements into TPRM lifecycle processes and governance.
  • Support regulatory engagement and audit activity.
• Enterprise Collaboration & Stakeholder Leadership
  • Build strong partnerships with senior stakeholders across Operations, Procurement, Investments, Compliance, Enterprise Risk, Information Security, Legal, IT and Operational Resilience functions.
  • Work closely with the Head of Procurement to ensure effective integration between sourcing, supplier lifecycle management and third-party risk governance activities.
  • Act as the Group subject matter expert and trusted advisor on third party risk management matters.
  • Influence and support business stakeholders in embedding practical, commercially effective and risk-based third-party management practices.
  • Lead stakeholder engagement, awareness and education activities to strengthen organisational understanding and ownership of third-party risk management responsibilities.
• Technology, Data & Transformation
  • Manage the implementation and optimisation of TPRM technologies, tooling and workflow capabilities.
  • Drive improvements in automation, data quality, reporting and management insight capabilities.
  • Support the development of scalable and sustainable governance processes through technology-enabled transformation.
  • Use data-driven insights to identify emerging risks, trends and improvement opportunities.
• Leadership & Capability Development
  • Provide leadership, direction and prioritisation across the TPRM function and future operating model.
  • Support the continued development of organisational capability, awareness and accountability for third-party risk management.
  • Foster a culture of collaboration, continuous improvement and pragmatic risk management.
  • Support the ongoing evolution of team structure, capability and operating approach as the function matures.
  • Contribute to broader enterprise transformation, governance and operational excellence initiatives.

What you will bring:

• Educated to degree level or equivalent professional experience.
• Extensive experience (ideally 10+ years) within Procurement, Supplier Risk, Third-Party Risk Management or related risk disciplines.
• Demonstrable experience evolving enterprise-wide TPRM or supplier risk frameworks within regulated organisations.
• Experience operating within first line risk ownership models and working closely with second and third line functions.
• Experience managing cross-functional transformation and framework embedding initiatives.
• Experience managing and developing small teams and operating models.
• Strong track record of influencing senior stakeholders and driving organisational change.
• Extensive experience leading Third-Party Risk Management, Supplier Risk Management or Outsourcing Risk functions within Financial Services or other highly regulated environments.
• A strong understanding of UK Regulation is essential and a good understanding Regulation in our other operating jurisdictions is helpful, especially Bermuda and EU.
• Proven ability to operate effectively in complex, matrixed organisations and influence senior stakeholders across multiple business functions and jurisdictions.
• Strong strategic thinking capability combined with a pragmatic, hands-on delivery mindset.
• Ability to balance commercial objectives, operational realities and risk management requirements in decision making.
• Outstanding stakeholder management and executive communication skills, with the ability to challenge constructively and influence at Exec level.
• Demonstrated experience designing, implementing and embedding risk management frameworks and governance models.
• Strong organisational change and transformation capability, including experience embedding new processes, controls and technologies into business operations.
• Ability to lead through ambiguity, manage competing priorities and navigate organisational complexity effectively.
• Collaborative style with strong relationship management and cross-functional partnering capability.
• Strong judgement, credibility and resilience, with the ability to simplify complex issues into clear and actionable outcomes.
• Deep understanding of Third-Party Risk Management frameworks, outsourcing governance and supplier risk management practices within Financial Services.
• Strong knowledge of supplier governance and relevant regulatory expectations impacting outsourcing and third-party risk.
• Experience implementing and enhancing TPRM technologies, platforms and workflow solutions.
• Strong understanding of end-to-end procurement and supplier lifecycle management processes.
• Knowledge of risk management methodologies, controls, governance and reporting practices.
• Strong analytical and problem-solving capability with the ability to use data and insight to support decision making.
• Ability to develop meaningful management information, risk reporting and executive-level insights.
• Excellent communication and presentation skills across technical and non-technical stakeholder groups.
• Strong project, programme and change management capability.