Supplier Risk Manager

Job Title: Supplier Risk Manager

Reporting to: Procurement Excellence Manager

Direct Reports: N/A

Position Type: Permanent

Standing still is not an option in the current world of Insurance. TMHCC is one of the world's leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.

Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes - from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement:
Ops makes it happen.

Operations is made up of 7 functions, this role sits within:
Procurement and Workplace Management

From identifying the scope of the goods and services required to deliver business outcomes, to negotiating pricing and managing the full lifecycle of contracts and suppliers. Procurement focuses on delivering Value For Money for the organisation. We leverage market intelligence and navigate the regulatory landscape to achieve commercial outcomes and reduce risk and complexity.

The Supplier Risk Manager will lead the redesign and enhancement of TMHCC's Supplier Risk Operating Model, ensuring alignment with evolving regulatory expectations, and best practice across the Financial Services sector. The role will act as a subject matter expert and delivery lead for supplier risk governance, assurance, and regulatory compliance, including DORA, Operational Resilience, and European regulatory engagement, while supporting key regulatory change initiatives (e.g. DyGIST, SS5/25).

• Lead the review, redesign, and enhancement of the Supplier Risk Operating Model, including:
  • Policies and standards
  • End-to-end processes
  • Organisational structure and governance
  • Supplier risk segmentation and tiering
  • RACI models across the first and second lines
• Assess current state maturity, identify gaps, and provide clear, prioritised recommendations aligned to regulatory expectations and industry best practice.
• Review existing artefacts (policies, frameworks, templates, methodologies) and propose improvements or rationalisation.

• Lead BAU supplier risk regulatory compliance activities, ensuring continued adherence to UK and EU regulatory requirements.
• Lead the DORA Supplier Risk workstream, including:
  • Identification and classification of ICT third-party providers
  • Contractual, oversight, and assurance requirements Coordination of evidence and regulatory readiness activities

• Act as the primary point of contact for European counter parties on supplier risk matters.
• Support coordination and alignment across UK and European regulatory expectations.

• Lead the DyGIST procurement and supplier workstream, ensuring supplier risk considerations are appropriately embedded.
• Lead SS5/25 procurement and supplier related workstream.
• Provide input into the development and enhancement of sourcing-related artefacts (e.g. Sourcing Policy, Supplier Code of Conduct) in collaboration with Procurement and policy owners, ensuring clear ownership and avoiding duplication of accountability.

• Collaborate with internal stakeholders (Risk, Legal, Compliance, Data Protection, IT, Security, Operational Resilience and Business Owners) to ensure a joined‑up approach to supplier risk management.
• Provide expert challenge and guidance on high‑risk suppliers, material outsourcing arrangements, and concentration risk.
• Support senior management and governance forums with…