Risk & Controls Oversight Senior Lead - Third party and LRR Risk

As a Risk & Controls Oversight Senior Lead
- Third party and LRR Risk you’ll be responsible for providing expert oversight on third party and LRR risk. You’ll play a critical role in ensuring our risk management practices are robust, effective, and always in compliance of risk and control management frameworks. You’ll also act as a key bridge between the Customer & Digital Team, Chief Operating Office (CCO), second and third-line risk partners, and other stakeholders.

In this role, you’ll develop and assess risk appetite, lead conversations on risk acceptance, ensure controls are designed and assessed properly, resolving any gaps and improving the control environment. You'll also ensure ongoing monitoring of controls to keep the business audit ready, embed active risk management culture, assessing new business activities and leveraging tools KRIs and risk dashboards.

You’ll stay on top of market trends and emerging risks, driving continuous education based on internal and external themes and lessons learnt. You'll be responsible for ensuring compliance with relevant laws and regulations, preparing and enhancing governance papers and reports. Additionally, you’ll identify opportunities for data‑led controls monitoring and automation of controls. You’ll ensure compliance with RCSA, Issue management and Risk events management process in line with Operational Risk framework.

Tobesuccessfulasa Risk & Controls Oversight Senior Lead
- Third party and LRR Riskyoushouldhaveexperiencewith:

• Good understanding of Retail Banking Customer Journeys to identify and manage associated risks and controls

• Proven experience in data analytics, data science, and driving automation and digitization within Risk Management processes

• End-to-end third‑party lifecycle risk management: onboarding, due diligence, ongoing monitoring, exit

• Supplier dependency & concentration risk management (critical vendors, single points of failure)

• Outsourcing / material service provider risk management and compliance with regulatory expectations

• Fourth‑party risk visibility (sub‑contracting chains, hidden exposures)

• Third‑party performance & control assurance (SLAs, control attestations, audits)

• Alignment of controls to LRR obligations and regulatory standards, ensuring correct applicability across journeys in Customer & Digital

• Understanding of new LRRs impacting the business, with ability to work closely with Regulatory Engagement teams to ensure compliance

• Ability to balance risk management with business goals when defining Risk Appetite, and effectively influencing or negotiating with stakeholders on risk acceptance

• Be able to conduct active deep dives and Risk assessments for active Risk management

• Well‑versed in market trends, competitor activities, and the broader risk environment, with the ability to use this knowledge to enhance internal controls

• Having gravitas and experience in influencing senior stakeholders including Managing Director level

• Ability to design and implement the Risk strategy in line with the Overall Vision of BUK Customer and Digital function

• Deep understanding of market trends, competitor activities, and the broader risk environment, using this knowledge to drive continuous improvements in internal controls

• Subject Matter Expertise and experience of delivering transformation and change in Risk management

Someotherhighlyvaluedskillsmayinclude:

• Self‑motivated with the ability to work independently while contributing effectively within a team of risk specialists

• Ability to balance risk considerations with commercial objectives when defining Risk Appetite and influencing stakeholders on risk acceptance

• Capable of applying expertise in Third party and LRR risk within the context of Customer & Digital, ensuring tailored solutions for this area

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job‑specific technical skills.

This role can be based in London or Northampton.

To assess the integrity and effectiveness of the banks internal control framework to support the…