The posting
G MASS is partnering with a global financial market infrastructure provider to strengthen its third-party risk management function.
This is a client-side role within the firm’s third-party risk team, assessing suppliers and outsourcing arrangements across the full vendor lifecycle, from due diligence and onboarding through periodic review and exit. The work covers operational resilience, information security, financial stability and regulatory risk, with the role supporting compliance with PRA SS2/21, FCA SYSC 8, DORA and the EBA Guidelines on outsourcing arrangements.
The role suits someone with one to three years’ experience in third-party risk management, outsourcing or a related control function within financial services, who is analytical, detail-focused and confident with stakeholders. This is an initial 12 month contract role based in London
Key Responsibilities
- Carry out risk assessments of new and existing third parties across due diligence, onboarding, periodic review and exit.
- Review vendor evidence including questionnaires, SOC reports and policies, identifying control gaps.
- Agree remediation actions with business owners and suppliers, tracking them through to closure.
- Assign and maintain risk ratings and criticality tiering, keeping the third-party inventory and risk register accurate.
- Support outsourcing classification and concentration risk analysis in line with regulatory requirements and internal policy.
- Escalate material issues to senior stakeholders.
- Produce MI on the third-party risk profile, assessment status and outstanding findings for risk committees and governance forums.
Requirements
- 1-3 years’ experience in third-party risk management, outsourcing, vendor management or a related risk and control function within financial services.
- Experience reviewing vendor due diligence evidence such as questionnaires and SOC reports.
- Working knowledge of PRA SS2/21, FCA SYSC 8, DORA or the EBA Outsourcing Guidelines.
- Exceptional attention to detail and strong Excel skills.
- Confident stakeholder management with business owners and external suppliers.
- Clear, concise written communication, including for senior audiences.
Benefits
Contract: 12 month contract, with a view to going permanent with the end client
Hybrid working



