Third Party and Operational Resilience Manager - Cameron Kennedy

Third Party & Operational Resilience Manager

Central London | Hybrid (4 days in office) | Up to £90,000 + Bonus + Benefits
A well-established international bank in Central London is looking for a Senior Third Party & Operational Resilience Manager. The role reports to the COO. You'll own the bank's third-party risk and operational resilience frameworks and report to executive committees, the Board and, when needed, the regulators.
The team is small, so the role is broad. You'll manage one direct report and work with stakeholders across the whole bank, as well as group colleagues, suppliers and external audit.

Key responsibilities

• Own the third-party management framework and policy across the full vendor lifecycle, from due diligence and contracting through monitoring to exit
• Maintain the outsourcing and third-party register, including materiality and criticality assessments, and lead preparation for the 2027 regulatory requirements on material third-party reporting
• Make sure contracts meet regulatory requirements, including audit and access rights, subcontracting, incident notification and termination
• Set and monitor SLAs and KPIs, run supplier risk assessments and test exit plans
• Develop the operational resilience framework, covering Important Business Services, impact tolerances, mapping and scenario testing
• Oversee business continuity, including BIAs, continuity plans, crisis management and recovery testing, and lead the response if a critical supplier fails
• Produce Board-level reporting and chair the Third Party & Resilience Governance Committee

• At least 5 years in third-party, outsourcing or vendor risk management within UK financial services, with line management experience
• Banking experience is preferred. Candidates from other UK-regulated financial services firms will be considered if they have the same specialist expertise
• Strong, practical knowledge of PRA SS2/21, PRA SS1/21, FCA SYSC 8 and SYSC 15A, and the UK Critical Third Parties regime. Knowledge of DORA is an advantage
• Hands-on experience of business continuity and resilience testing
• The confidence to challenge senior stakeholders, with strong written and presentation skills