Analyst - Third Party Technical Assurance
Core
Lead third-party/supplier technical risk assurance for banking/finance/hedge fund businesses, ensuring risk exposure from outsourced services, cloud providers, and critical ICT vendors is identified, assessed, controlled, and monitored.
Role type
IT & Cyber Technical Risk Assurance Manager (Third Party / Supplier)
Builds
Risk-based Third-Party Assurance (TPA) programme covering due diligence, onboarding, contractual security clauses, continuous monitoring, issue remediation, and offboarding/exit strategies.
Domain
Financial services / Cybersecurity / Third-Party Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Third-party risk framework design, technical/security due diligence, contractual SLA controls, continuous monitoring, third-party resilience validation, stakeholder engagement, regulatory compliance mapping
Preferred skills
Executive reporting, regional enablement, strategic alignment with Group Cyber Strategy
Technologies
ISO/IEC 27001:2022, NIST CSF 2.0, GDPR, DORA, EU AI Act, PCI DSS, COBIT, ISO 31000
Responsibilities
Establish policy and standards for third-party technical risk; perform technical/security due diligence and verify compliance; embed DORA ICT contractual clauses and SLA controls; operate ongoing assurance through attestations and evidence reviews; validate DR/BC/exit strategies; present supplier risk posture to the Technology Risk Forum; partner with business owners, procurement, legal, and regulators.
Seniority
Senior, hands-on IC
