Third Party Risk and Supplier Relationship Manager

Overview

In this role, you will lead PIC’s Third-Party Risk Management programme to identify, assess, mitigate, and monitor third-party risks in a regulated environment. You will partner with cross-functional teams to align supplier risk with strategic objectives while protecting assets, reputation, and stakeholders. The role involves building robust controls, delivering insights to senior stakeholders, and driving continuous improvement in risk management. You will shape the TPRM framework, leverage data for decision-making, and contribute to operational resilience in a regulated setting.

Pay / Benefits

• private medical insurance
• 28 days’ annual leave (excluding bank holidays)
• generous pension scheme
• travel insurance
• Critical Illness cover
• Life Assurance

Responsibilities

• Lead the third-party risk lifecycle from onboarding to assessments and offboarding
• Implement risk controls and mitigation strategies across suppliers
• Monitor supplier performance and overall risk exposure
• Deliver reporting and insights to senior stakeholders and governance bodies
• Communicate risks clearly and proactively to relevant teams
• Manage supplier relationships, KPIs, and SLAs including issue resolution
• Oversee supplier issues, disputes, and exits with appropriate governance
• Ensure regulatory compliance and drive continuous improvement of TPRM processes
• Utilise data to enhance reporting and decision-making for risk oversight
• Maintain ongoing professional development in risk management practices

Key requirements

• End-to-end expertise in the TPRM lifecycle
• Experience in supplier risk, performance, and relationship management
• Hands-on due diligence, assurance, and ongoing monitoring
• Proficiency in TPRM / GRC systems (e.g. ServiceNow, Prevalent)
• Strong data, reporting, and Power BI (or similar) capability for risk oversight and decision-making
• Knowledge of AI and its application within TPRM
• Translate regulatory requirements into practical controls, frameworks, and SOPs
• Conduct robust risk assessments and supplier assurance (e.g. ISO, SOC reviews)
• Manage supplier performance and relationships, including KPIs/KRIs and governance

• Effective communication
• Stakeholder engagement
• Influencing and collaboration across business, risk and technical teams
• TPRM / GRC systems (e.g. ServiceNow, Prevalent)
• Power BI or equivalent data visualization
• Risk reporting and data analytics

…