Third Party Risk Management Manager – FTC

• 6-month FTC
• Onsite 5 days/ week
• Dublin City Centre
• Strong package + full benefits

Overview:

The position will focus on assessing third-party relationships, understanding service and operational dependencies, challenging the quality of supplier information and coordinating reviews with relevant internal specialists. The successful candidate will ensure that assessment outcomes, risk decisions and follow-up actions are clearly documented and appropriately managed.

This role is suited to a methodical and commercially aware risk professional with strong analytical skills, sound judgement and the ability to manage multiple assessments effectively.

Core Responsibilities

• Gather and evaluate information relating to supplier services, corporate structures, delivery arrangements, operating locations, data access, technology and business dependencies.
• Undertake and coordinate supplier background checks, corporate verification, ownership reviews and relevant screening activities.
• Determine inherent risk ratings and service criticality, ensuring assessments are appropriately justified and updated when circumstances change.
• Examine supplier documentation, including questionnaires, policies, certifications and independent assurance reports, to establish the strength and relevance of supporting evidence.
• Work collaboratively with internal teams across information security, data protection, compliance, legal, enterprise risk, finance, technology and operational resilience.
• Monitor risk findings, agreed remediation plans, approval requirements, exceptions and risk acceptances, ensuring actions are progressed and appropriately closed.
• Contribute to reviews of outsourcing arrangements, ICT suppliers, cloud services, SaaS, managed services, AI solutions, data processing and operational resilience.
• Prepare assessment reports, risk summaries and management information using Excel and relevant TPRM, GRC and reporting systems.

Key Deliverables

• Oversee third-party risk reviews from initial engagement and onboarding through to ongoing monitoring, periodic review and termination.
• Challenge incomplete or inconsistent information, identify control deficiencies and highlight outstanding risk issues.
• Establish appropriate due diligence requirements based on the nature, complexity and criticality of supplier services.
• Ensure risk assessments, approval decisions, supporting evidence and remediation activities are accurately recorded.
• Develop and maintain reporting on assessment activity, key risks, exceptions and outstanding actions.
• Identify opportunities to improve supplier onboarding, assessment workflows and wider risk management processes.

Key Skills and Capabilities

1. Third-Party Risk Management

• Ability to evaluate supplier relationships, understand service dependencies and determine appropriate risk assessment requirements throughout the supplier lifecycle.
• Relevant experience: Supplier onboarding, risk classification, due diligence, ongoing oversight, periodic reviews and supplier offboarding.

2. Assessment of Supporting Evidence

• Confidence in reviewing supplier information critically, distinguishing substantiated evidence from general statements and identifying weaknesses or inconsistencies.
• Relevant experience: Reviewing due diligence questionnaires, internal policies, SOC reports, ISO certifications, resilience assessments and evidence of completed remediation.

3. Risk Assessment and Control Oversight

• Understanding of risk identification, control effectiveness, residual risk exposure, remediation requirements and escalation procedures.
• Relevant experience: Operational risk assessments, control reviews, issue management, risk registers and GRC processes.

4. Regulatory and Resilience Knowledge

• Awareness of regulatory expectations relating to third-party relationships, outsourcing, ICT risk and operational resilience within financial services or other regulated industries.
• Relevant experience: DORA, FCA/PRA outsourcing standards, EBA guidance or equivalent regulatory frameworks. Detailed legal interpretation is not expected.

5. Technology and Information Risk Awareness

• Ability to recognise technology and data-related risks associated with external providers and engage effectively with technical subject matter experts.
• Relevant experience: Cloud and SaaS assessments, managed service reviews, cybersecurity due diligence, privacy assessments and data processing reviews.

6. Supplier Background and Corporate Checks

• Ability to review corporate information, verify legal entity details and assess ownership, control and screening information.
• Relevant experience: KYB/KYC processes, sanctions screening, PEP checks, adverse media research and company registry searches.

7. Documentation and Assessment Management

• Ability to manage assessment workflows, maintain reliable records and ensure decisions, supporting evidence and follow-up actions are properly captured.
• Relevant experience: TPRM/GRC systems, assessment trackers, audit documentation, action management and quality control.

8. Reporting and Stakeholder Communication

• Strong analytical and written communication skills, with the ability to turn complex assessment findings into clear conclusions and meaningful management information.
• Relevant experience: Excel-based analysis, dashboard reporting, risk summaries, committee papers and senior management reporting.

Other Desirable Experience

• Background in insurance, reinsurance, banking, payments or another regulated financial services environment.
• Working knowledge of DORA, ICT supplier oversight, outsourcing or operational resilience requirements.
• Exposure to assessments of technology providers, including cloud, SaaS, managed services, data and AI solutions.
• Experience using third-party risk or GRC platforms such as ServiceNow, Archer, OneTrust, Coupa Risk Assess, ProcessUnity or similar systems.
• Familiarity with Power BI or other business intelligence and reporting tools.
• Relevant qualifications in risk management, compliance, cybersecurity, operational resilience, procurement or financial services.

Indicators of Success

• Supplier risk reviews are proportionate and reflect the nature and importance of the services being provided.
• Risk ratings and approval outcomes are supported by documented evidence and clear assessment rationale.
• Identified weaknesses and remediation requirements are actively monitored through to resolution or formal risk acceptance.
• Internal specialists are engaged effectively, with clear responsibilities for technical and subject-specific assessments.
• Changes to supplier arrangements are recognised and trigger appropriate review activity.
• Assessment documentation is complete, consistent and provides a reliable audit record throughout the supplier relationship.