Senior Third-Party Risk Manager, Supply Chain Resilience
Hybrid, UK | Up to £120,000
Hybrid, UK-based, one day a month in the UK HQ
You’ll be the named lead on a managed third-party risk programme for a UK regulated financial services client, owning the relationship and every assessment that reaches them. Working for a specialist supply chain risk and cyber resilience consultancy, your judgement on supplier risk will shape client decisions and how the firm’s proposition develops.
What you’ll actually do
- Lead supply chain resilience assessments across Critical, High and Medium tier vendors, covering security, operational resilience, data protection, exit readiness, concentration and fourth-party risk
- Run design and operating effectiveness testing for Critical and High tier vendors, and defend your conclusions with evidence
- Present findings and portfolio risk to C-suite and board stakeholders, translating technical and data protection risk into business impact
- Lead and develop a team of analysts, reviewing their work so every rating is traceable and every finding has an owner
- Spot growth opportunities within the account and contribute to new business, methodology and thought leadership
What you’ll need
- Senior third-party risk, supply chain resilience or outsourcing assurance experience in UK regulated financial services, whether in-house, consultancy or managed service
- Experience leading evidence-led control assessments using design and operating effectiveness or internal audit methodology
- Working knowledge of SS2/21, FCA operational resilience expectations, UK GDPR for processors and sub-processors, Cyber Essentials and ISO 27001
- Experience assessing supplier risk across multiple dimensions, not just IT security
- Experience owning a senior client relationship and writing risk-rated reports for senior audiences
- Confidence progressing commercial conversations without a hard sell
Nice to have
- CRISC, CISM or CISA, or working towards one
- IIA, ACCA or equivalent internal audit training
- Experience with PRA-supervised firms, plus DORA and EBA Outsourcing Guidelines knowledge
#J-18808-Ljbffr
Senior Third-Party Risk Manager employer: LT Harper Group
As a Senior Security Engineer at our specialist Microsoft security partner, you'll thrive in a dynamic and supportive work culture that prioritises employee growth and development. With a hybrid working model that allows for flexibility and a focus on continuous training, you will have the opportunity to work across multiple enterprise environments while collaborating with a talented team in London. Join us to make a meaningful impact in the cybersecurity landscape while enjoying the unique advantages of a forward-thinking organisation.
