Senior Associate in Third Party Risk Management

Who you are

• Experience: 4+ years of dedicated experience in Third-Party Risk Management (TPRM), risk management, compliance, or a related operational control function
• Consulting Background: Prior experience working at a Big 4 (e.g., Deloitte, EY, PwC, KPMG) or a similar major consulting firm is highly desirable
• Operational Control: Proven experience acting as a process gatekeeper or reviewer, with specific experience in Quality Assurance (QA) for risk or compliance deliverables
• Coordination: Demonstrated success coordinating delivery and information flow between offshore/remote teams and demanding onshore business/risk stakeholders
• Stakeholder Management: Strong organizational and interpersonal skills, with the ability to manage expectations and articulate complex operational risks clearly
• TPRM/GRC Knowledge: Solid understanding of TPRM principles, risk domains (InfoSec, BCP, ABAC, etc.), and prior experience supporting the administration or maintenance of a GRC/TPRM platform is highly desirable

What the job involves

• We are seeking a TPRM Senior Associate with 4+ years of relevant experience to serve as a key operational member of the London TPRM team
• This role is the primary operational bridge between the London leadership, the Offshore TPRM Operations Team, and critical onshore functions (Procurement, Business Owners, Risk SMEs)
• The Senior Associate is responsible for coordinating the execution workflow, managing the quality assurance of medium-risk third parties, and driving the logistics for the critical Supplier Performance Review process
• This role is centred on execution quality, operational leadership, and cross-functional coordination within the London TPRM team structure:
• Offshore Operations Liaison & Quality Control:
• Act as the primary daily point of contact and operational supervisor for the Offshore TPRM Operations Team, ensuring the accurate and timely execution of all third-party risk assessments and due diligence activities
• Lead the Quality Control (QC) process for all assessments delivered by the offshore team, ensuring outputs are consistent, align with established methodologies, and are fully audit-ready
• Monitor the operational performance of the offshore team against defined Service Level Agreements (SLAs) and Key Performance Indicators (KPIs)
• Be ready to conduct third-party assessments to support the team, where required
• Stakeholder Coordination & Assessment Oversight:
• Coordinate Assessment Initiation by working closely with Procurement and Business Owners to ensure third-party risk assessments are initiated at the correct phase of the third-party lifecycle
• Manage the crucial triage and review process by coordinating with Internal Risk SMEs (e.g., InfoSec, Data Privacy, BCP) to ensure high-risk assessments receive appropriate specialized review and sign-off prior to completion
• Serve as the operational point of contact for these onshore internal risk teams regarding third-party-specific findings and remediation requirements
• Supplier Performance Monitoring & Reporting:
• Oversee the governance and standardization of ongoing supplier performance monitoring activities executed by the offshore team
• Coordinate with Business Owners and Procurement to collect and review performance data (e.g., SLA adherence, operational metrics) and integrate significant performance failures or deficiencies into the overall third-party risk profile
• Ensure any critical performance issues are appropriately flagged for risk review and incorporated into continuous monitoring plans
• Escalation and Remediation Management:
• Serve as the primary escalation point for all high-risk findings, process bottlenecks, and third-party non-compliance issues reported by the Offshore TPRM Operations Team
• Work with Business Owners and Procurement to define, drive, and track third-party remediation plans, ensuring mitigation steps are completed within established timelines
• 2nd Line of Defense Liaison & Governance Support:
• Act as the key operational liaison for the 2nd Line of Defense (Risk Oversight), compiling and delivering required operational data, metrics, and commentary on the coverage and control effectiveness of the TPRM program
• Support the TPRM team in the preparation of reports and presentations on TPRM metrics, trends, and program effectiveness for leadership and Risk Committees
• Program & Tool Support:
• Assist the TPRM team in the implementation, configuration, and ongoing maintenance of the TPRM system/tool, ensuring data integrity across the platform

Benefits

• 401(k)
• Dental insurance