Analyst - Third Party Technical Assurance

5 - 7 years in third-party technical risk assurance/TPRM within financial services, including critical ICT providers and cloud services.

· Hands-on experience embedding DORA contractual clauses, GDPR DPAs, ISO/IEC 27001:2022, NIST CSF 2.0 outcomes, EU AI Act responsibilities, PCI DSS, COBIT governance, and ISO 31000 risk treatment.

· Exceptional communication, presentation, articulation, and stakeholder influence skills; effective at supplier engagement and executive reporting.

Success Indicators

· Third-party onboarding with complete due diligence and compliant contracts; clear risk decisions documented.

· Reduction in vendor-origin incidents and SLA breaches; timely breach notifications and effective remediation.

· Audit/regulator confidence in supplier controls; strong evidence quality and continuous monitoring performance.

· Clear TRF narratives enabling funding/prioritization and strategic decisions on vendors.