Third Party Risk Management Risk Specialist

Role Description

The purpose of the Non-Financial Risk Management (NFRM) function is to ensure that the banks Non-Financial Risk exposure is adequately managed in-line with the group wide risk appetite and NFRM framework. To achieve this the NFRM function requires:

• Risk Specialist with the experience, and tools to assess complex risks, identify themes, and intervene where they lie outside the banks risk appetite.
• Strong understanding of the risk framework and risk type which would allow NFRM to provide support, review, and challenge in line with the 3 Lines of Defense Model.
• Close coordination with all Second Line Risk Type Controllers and other stakeholders along the Supply Chain to provide a holistic view of Third Party risk.
• Proper consideration of emerging risks, rather than just current issues.
• Effective governance combined with supporting MI that facilitates decision-making.

NFRM is a matrix organisation with business / region and functional specialist axes.

The role sits in the Third Party Risk Management Risk Type Controller team and is part of a central support function for the global teams located in London and New York. The Associate is mainly responsible to build out and mature a new Third Party Assurance framework, supports the annual scenario exercise, the scoping of the Third Party portfolio carrying the highest risk for the firm, and additionally implement and conduct a quarterly 2LOD independent review and challenge that gets high visibility. As this is a new framework, critical thinking, finding innovative solutions to problems at hand and good communication skills - both verbally and writing - are key for this role.

As part of the central utility supporting the global teams, there is an opportunity to support senior management governance oversight fora and general change management activity in the Third Party Risk Type Controller space.

Your key responsibilities

• Main responsibility is maturing of the new Third Party Assurance framework by closely working with the new Central Function in Group Procurement, risk assessors, and other Risk Type Controllers
• Other main focus of this role is developing and executing 2LOD independent control assurance (dip sampling)
• Supporting the annual scenario setting for Third Party Assurance and support scoping of the portfolio
• Supporting metric development and monitoring
• Contributing to change management activity within Third Party Risk Management tooling and other technology developments
• Assist with policy updates and preparation of material for Third Party governance bodies
• Maintain knowledge of industry trends and standards, risk management practices, legal and regulatory changes
• Promote the Risk culture and visibility of NFRM via training and participation in NFR governance forums
• Keep abreast of changes in relevant NFR frameworks, tools, laws etc. and understand their implications for Third Party Risk Management
• Contribute to projects / regulatory exams / task forces / working groups relating to Third Party Risk Management.

Your skills and experience

• Qualification requirement of Bachelors (ideally Business Administration, Finance, Data Science), Certification on Risk Management or Information Security, Third Party Risk Management, Internal or External Audit or equivalent
• 4-6 years experience in a similar role within financial services or consulting
• A robust understanding of Operational Risk / Non-Financial Risk Management principles and practices
• Demonstrable experience of developing strong working relationships with business areas to facilitate successful risk management within the 3 Lines of Defense model
• Worked with non-risk Stakeholders within a high-pressure dynamic environment
• Appreciation of the global regulatory environment broadly the regulator perspectives on non-financial risk and Third-Party Risk Management.