Supplier Risk Lead

Location: Dunton Campus (Basildon, Essex) OR Manchester Business Centre

• Working Model: Hybrid arrangement

• Remuneration: Competitive Base Salary + Contractual Holiday Bonus + Up to 12% Employer Pension + Comprehensive Benefits & Vehicle Schemes

• Department: Risk | ICT Risk Office, Second Line of Defence

• Reports to: ICT Risk and Information Security Manager

Operating within Ford Credit Europe Bank plc, our Risk function provides independent oversight, challenge, and assurance across the Bank’s critical operations. As an established, dual-regulated (PRA/FCA) European bank backed by a global automotive leader, we combine long-term institutional stability with major investment in digital resilience, modern governance, and technology risk management.

As Supplier Risk Lead, you will play a pivotal Second Line of Defence (2

LoD) role leading independent oversight, constructive challenge, and assurance across FCE Bank’s third-party and supplier risk landscape.

You will help shape and modernise our global Third-Party Risk Management (TPRM) framework, driving alignment with evolving European and UK regulatory standards, notably the Digital Operational Resilience Act (DORA) and PRA SS2/21. With direct visibility to executive risk committees, this role offers an exceptional platform to influence enterprise strategy and transition into senior risk leadership.

• Independent Challenge & Assurance: Conduct robust 2
  
  LoD review and challenge of First Line supplier risk assessments, classifications, due diligence, and mitigation plans.

• TPRM Framework Modernisation: Drive the ongoing enhancement of FCE Bank’s global TPRM framework, policies, and assessment methodologies, ensuring alignment with DORA, PRA SS2/21, and broader PRA/FCA expectations.

• Regulatory Oversight & DORA Register: Oversee the DORA ICT Third-Party Register of Information and evaluate systemic third- and fourth-party concentration and operational resilience risks.

• Executive Dashboards & MI: Produce high-impact supplier risk reporting, Key Risk Indicators (KRIs), and executive dashboards for senior leadership and Executive Risk Committees.

• Incident & Assurance Support: Oversee material supplier risk events, root-cause remediations, and represent 2
  
  LoD oversight during internal audits and direct regulatory engagements.

• Business Advisory: Act as a trusted, constructive subject matter expert to 1
  
  LoD contract owners, procurement, and vendor management teams on complex supplier risk arrangements.

• TPRM & Operational Risk Expertise: Proven track record in Third-Party Risk Management, outsourcing risk, or operational resilience within a regulated financial services environment (PRA/FCA banking or automotive finance preferred).

• Regulatory Knowledge: Practical working understanding of UK/EU operational resilience frameworks, specifically DORA and PRA SS2/21.

• Constructive Challenge: Confidence and gravitas to provide independent, robust challenge to First Line business owners while maintaining collaborative stakeholder relationships.

• Lifecycle Risk Assessment: Experience assessing risk across the full supplier lifecycle; including supplier financial viability, ICT & information security controls, business continuity/disaster recovery, and fourth-party dependencies.

• Analytical & Communication
  
  Skills:
  
  Ability to synthesize complex technical, operational, and regulatory risks into concise executive summaries and committee-level reporting.

• Competitive compensation package: Competitive base salary plus FCE’s unique contractual Guaranteed Holiday Bonus.

• Market-Leading Pension: Up to 12% employer pension matching contribution.

• Direct Path to Senior Leadership: Clear architecture for…