Senior Associate, Third Party Risk Management

Overview

In this role you will lead operationally for London’s TPRM team, coordinating offshore and onshore risk activities to ensure timely, audit-ready third-party assessments. You will supervise quality control, monitor SLAs/KPIs, and drive the Supplier Performance Review process. You’ll coordinate with Procurement, Business Owners, and risk SMEs to manage risk findings, remediation, and reporting for leadership. This position supports a scalable, governance-driven TPRM program in a fast-growing fintech environment.

Responsibilities

• Act as the primary liaison for the Offshore TPRM Operations Team, ensuring timely execution of third-party risk assessments and due diligence
• Lead QC for offshore-delivered assessments to ensure consistency, methodologies alignment, and audit-readiness
• Monitor offshore performance against SLAs and KPIs; perform assessments when needed
• Coordinate Assessment Initiation with Procurement and Business Owners to trigger risk assessments at the correct lifecycle phase
• Manage triage and review with Internal Risk SMEs to ensure high-risk findings receive appropriate sign-off
• Oversee ongoing supplier performance monitoring; integrate performance data into the risk profile
• Escalate high-risk findings and remediation bottlenecks; track remediation timelines
• Serve as the 2nd Line of Defense liaison, delivering operational data and commentary on coverage and control effectiveness
• Assist in implementing, configuring, and maintaining the TPRM system to ensure data integrity

Key requirements

• 4+ years in Third-Party Risk Management, risk management, compliance, or related control function
• Experience coordinating offshore/remote teams with demanding onshore stakeholders
• Strong organizational and interpersonal skills for stakeholder management
• Solid understanding of TPRM principles and risk domains; familiarity with GRC/TPRM platforms is highly desirable
• QA experience for risk or compliance deliverables
• Big 4 consulting background is desirable
• Experience with risk assessments, remediation planning, and risk reporting

• strong communication and collaboration
• analytical mindset and attention to detail
• ability to manage expectations and articulate operational risks
• TPRM principles and risk domains (InfoSec, BCP, ABAC)
• GRC/TPRM platform administration or maintenance
• quality assurance for risk/compliance deliverables

…