Third Party Risk Management Analyst
Core
Conduct hands-on risk assessments for new and existing third-party vendors, focusing on technology suppliers, to feed into risk committees and governance forums.
Role type
Third-party risk analyst (vendor risk)
Builds
Accurate risk assessments, risk ratings, and remediation tracking for the vendor lifecycle.
Domain
Financial services / Regulatory compliance / Information security
Required skills
Third-party risk assessment, Vendor due diligence, Regulatory compliance (PRA, FCA, DORA), Information security controls, Operational resilience, Risk rating assignment, Stakeholder management, GRC platform usage
Preferred skills
ProcessUnity experience, Financial services background
Technologies
ProcessUnity
Responsibilities
Conduct risk assessments of new and existing third parties across due diligence, onboarding, periodic review and exit. Review vendor evidence including questionnaires, SOC reports and policies, challenging responses and identifying control gaps. Agree remediation actions with business owners and suppliers, tracking them through to closure. Assign and maintain risk ratings and criticality tiering, keeping the third-party inventory and risk register accurate. Manage a high volume of assessments against deadlines tied to regulatory requirements. Support outsourcing classification and concentration risk analysis. Produce accurate, well-evidenced assessment output for review and onward reporting. Escalate material issues to senior stakeholders.
Seniority
Mid-level, hands-on IC
