Outsourcing & Third-Party Risk Manager

About the role

The Outsourcing & Third-Party Risk Manager will lead the development and maintenance of a Group‑wide outsourcing and third‑party risk framework. Reporting to senior leadership, the role ensures that all external arrangements support operational resilience, governance and regulatory compliance across every jurisdiction where the Group operates.

Key responsibilities

• Own and continuously improve the Group Outsourcing and Third‑Party Risk Management Framework.
• Provide strategic oversight and consistent application of outsourcing policies across all entities.
• Advise senior management and Boards on outsourcing risks, emerging trends and regulatory changes.
• Identify, assess, approve, document, monitor and review all outsourcing and third‑party arrangements.
• Manage the full lifecycle of third‑party engagements, from due‑diligence to contract oversight, performance monitoring and exit.
• Maintain registers and documentation reflecting the Group’s outsourcing landscape.
• Lead risk identification, including criticality, concentration and dependency assessments.
• Develop and test contingency and exit strategies to ensure business continuity.
• Collaborate with Legal, Risk, Compliance, ICT, Information Security and Data Protection functions.
• Provide guidance to first‑line teams and promote framework awareness through training.
• Monitor provider performance and contractual compliance, escalating material risks to governance bodies.
• Prepare regular reporting and MI for Board and committee oversight.

Required profile

• Proven experience in outsourcing or third‑party risk management within a regulated environment.
• Strong understanding of operational resilience, data protection and supervisory obligations.
• Ability to advise senior stakeholders and influence governance processes.
• Excellent analytical, communication and stakeholder‑engagement skills.

Required skills