Operational Resilience Risk Manager

Responsibilities

• Provide ongoing oversight and challenge to Line 1 led Third Party Management Risk control management
• Analyse and interpret key risk indicators and risk and control reporting to help determine where Line 2 effort is best focused, and to develop formal Line 2 opinions on Third Party Management Risk matters
• Provide insight, oversight and challenge within assigned monthly Fora
• Lead Line 2 led Third Party Management Risk Thematic/Risk Reviews throughout the full lifecycle, including Planning/Terms of Reference, Fieldwork, Findings Validation and Reporting stages
• Provide oversight and challenge on material Projects and Programmes
• Oversee Line 1 activity to ensure adherence to the Group’s Risk Management Framework, providing advice and guidance as required
• Support the broader team with assigned Line 2 activity relating to Information Technology, Information Security, AI, Operational Resilience and Third Party Management
• Develop and build relationships with Line 1 and Line 3 peers and senior stakeholders

• Proven experience managing Third Party Risk – including associated risk areas such as Operational Resilience, Information Technology and Information Security - in either a second or third-line capacity, preferably within Financial Services
• Strong stakeholder, relationship management and influencing skills
• An accomplished communicator who is comfortable, respectful and calm during sometimes challenging situations where differences of risk opinion need to be clearly positioned and justified
• Ability to analyse situations in a timely manner, producing clear, insightful and succinct written reports
• Professional qualification in Risk Management, Supply Chain Risk Management, IT and IS audit or risk management e.g., from IRM, CISI organisations (Preferred)
• Deep expertise in third-party regulatory requirements and landscape, with demonstrated ability to interpret and apply within frameworks (Preferred)