Third Party Due Diligence Technical Lead

Job Description

At Aberdeen our ambition is to be the UKs leading Wealth & Investments group.

Strengthening talent and culture is one of our strategic priorities. We strive to make Aberdeen a great place to work so that we can attract and retain the industrys best talent.

Our people put our stakeholders at the heart of everything they do by helping us to make a positive difference to the lives of our clients customers colleagues shareholders and society.

We are focused on growing our direct and advised wealth platforms and repositioning our specialist asset management business to meet client demand. We are committed to providing excellent client service supported by leading technology and talent.

Aberdeen comprises three businesses interactive investor (ii) Investments and Adviser each of which focuses on meeting and adapting to our clients evolving needs:

• interactive investor the UKs second largest direct-to-consumer investment platform enables individuals in the UK to plan save and invest in the way that works for them.
• Our Adviser business provides financial planning solutions and technology for UK financial advisers enabling them to create value for their customers.
• Our Investments business is a specialist asset manager that focuses on areas where we have both strength and scale to capitalise on the key themes shaping the market through either public markets or alternative asset classes.

The Third Party Risk Management Team (TPRM) sits within the Chief Operating Office (COO) which was established earlier this year as part of a strategic restructure. The COO function includes a range of teams including Operational Resilience Cyber Security and Incident Management all central to ensuring our people and data are safe and we understand and manage risk including third party risk within our risk appetite.

Occupying an important position within the Third Party Risk Management function your work will focus on providing technical expertise in the assessment of third-party suppliers during the due diligence process. This role ensures that suppliers meet Aberdeens standards for security compliance operational resilience and technology architecture. The technical expert works closely with Aberdeens risk domains Supplier Relationship Managers (SRMs) procurement and legal to identify and mitigate risks associated with supplier engagements.

The role ensures that third-party engagements meet internal risk standards and regulatory requirements supporting the organisations TPRM framework and risk appetite.

• Lead the technical assessment of suppliers during onboarding and periodic reviews.
• Evaluate supplier controls across cybersecurity data protection infrastructure software development and cloud services.
• Review and interpret supplier documentation including SOC reports penetration tests architecture diagrams and security policies.
• Collaborate with risk and compliance teams to ensure alignment with regulatory requirements (e.g. GDPR DORA ISO 27001).
• Provide expert input into risk ratings and remediation plans for suppliers.

The ideal candidate will possess the following:

• Strong technical background areas including; IT security infrastructure software engineering operational resilience is preferred.
• Experience in suppliers risk management or third-party due diligence.
• Familiarity with regulatory and industry standards (e.g. NIST ISO CIS DORA).
• Ability to interpret complex technical documentation and assess risk.
• Excellent communication skills to translate technical findings for non-technical stakeholders.

Theres more to working life than coming home with a good salary. We have an environment where you can learn get involved and be supported.

When you join us your reward will be one of the best around. This includes 40 days annual leave a 16% employer pension contribution a discretionary performance-based bonus (where applicable) private healthcare and a range of flexible benefits including gym discounts season ticket loans and access to an employee discount portal. You can read more about our benefits here.

Enabling our clients to…