Project Manager - Third-Party Registers and Incident Reporting

G MASS are supporting a new UK regulatory initiative focused on PRA/FCA third-party registers and incident reporting, emerging from the current consultation phase. The programme takes key components of DORAand applies them within a UK regulatory context, requiring strong Operational Resilience expertise and hands-on experience with third-party risk and register implementation.

This role will operate at the intersection of programme delivery and detailed regulatory analysis. It is suited to an experienced PM/BA who can work independently, shape delivery as policy clarity evolves, and provide structure in an environment where regulatory expectations are still being finalised.

The consultant will report into senior delivery leadership and work closely with directors and analysts within the programme. The role offers strong visibility across Operational Resilience, Risk, Compliance, and Technology teams, and will evolve as regulatory alignment between the PRA and FCA becomes clearer during 2026.

Responsibilities:

• Support the delivery of a new PRA/FCA regulatory initiative covering third-party registers and incident reporting
• Interpret consultation papers and evolving policy statements, translating regulatory intent into clear delivery artefacts
• Lead or support the collation of registered third-party information, aligned to DORA-style requirements
• Define and maintain registers, controls, and supporting documentation required for regulatory compliance
• Work closely with Operational Resilience, Risk, and Technology stakeholders to align implementation approaches
• Engage with internal stakeholders to manage dependencies, risks, and regulatory uncertainty as policy develops

• Strong experience delivering Operational Resilienceinitiatives within financial services
• Hands-on DORA implementation experience, particularly around third-party registers and incident reporting
• Experience collating, structuring, and validating third-party and vendor information for regulatory purposes
• Ability to operate independently with minimal supervision, providing direction to less experienced analysts where needed
• Strong stakeholder management skills across Risk, Compliance, Technology, and Operations
• Comfortable working in regulatory environments where requirements are still evolving

Length: 6 month contract

Salary: Up to £110k (subject to experience)

Office: London (4 days per week on-site)