Third Party Risk and Supplier Relationship Manager
Description
Role purpose
We are seeking a well-rounded TPRM professional with strong regulatory alignment (SS2/21), hands-on supplier risk management experience, and capability in systems, reporting, and operational resilience within a regulated environment.
You will lead PIC’s Third-Party Risk Management (TPRM) programme, overseeing the identification, assessment, mitigation, and monitoring of third-party risks to ensure alignment with strategic objectives and regulatory requirements, while safeguarding the organisation’s assets, reputation, and stakeholders.
Key Responsibilities & Accountabilities
- Lead third-party risk lifecycle, including onboarding and assessments.
- Implement risk controls and mitigation strategies.
- Monitor supplier performance and risk exposure.
- Deliver reporting and insights to senior stakeholders.
- Communicate risks clearly and proactively.
- Manage supplier relationships, KPIs, and SLAs
- Manage supplier issues, disputes, and exits.
- Ensure compliance and drive continuous improvement.
- Use data to enhance reporting and decision-making.
- Maintain ongoing professional development.
Requirements
Key skills and experience
PIC operates within the financial services industry and, therefore, is regulated by the FCA and the PRA. We would expect you to be able to demonstrate a good understanding of the regulatory framework and how it applies to the company.
Technical Attributes
- Strong knowledge of PRA SS2/21 and operational resilience (SS1/21)
- End-to-end expertise in the TPRM lifecycle
- Experience in supplier risk, performance, and relationship management
- Hands-on due diligence, assurance, and ongoing monitoring
- Proficiency in TPRM / GRC systems (e.g. ServiceNow, Prevalent)
- Strong data, reporting, and Power BI (or similar) capability for risk oversight and decision-making
- Knowledge of AI and how it can be used within TPRM.
Personal Attributes
- Translate regulatory requirements into practical controls, frameworks, and SOPs.
- Conduct robust risk assessments and supplier assurance (e.g. ISO, SOC reviews)
- Manage supplier performance and relationships, including KPIs/KRIs and governance.
- Influence and engage stakeholders across business, risk, and technical teams.
- Deliver clear, concise reporting for senior management and Board audiences.
DE&I at PIC
At PIC, we believe that true innovation stems from embracing diverse perspectives, backgrounds and experiences. We are committed to building a workplace where every individual, regardless of race, gender identity, sexual orientation, disability, age, religion, or socio-economic background, feels valued, heard and empowered to succeed. We hold ourselves accountable through ongoing initiatives, such as inclusive hiring practices, and equitable career development opportunities that support belonging and community. While we’re proud of our progress, we recognise there’s work ahead, and we remain dedicated to listening, learning and evolving together.
Benefits
In addition to a competitive base salary and the opportunity to participate in our annual, performance-related bonus plan, upon joining us here at Pension Insurance Corporation, you’ll have access to some great benefits, including private medical insurance, 28 days' annual leave (excluding bank holidays), a generous pension scheme, insurance for Travel, Private Medical, Critical Illness, Life Assurance and Income Protection, and much more.
Skills
As published by workable · 7 questions · 3 written answers
Basics
First name, Last name, Email, Legal Name, Phone, Education, Experience, Resume, Current Salary, Salary Expectation
Short answers (1)
- What is your notice period?
Pick from a list (3)
- Are you able to work in the UK without a work permit?
- Please indicate your current right to work status in the UK:
- Can you commit to working from our London office at least 3 days per week?
Written answers (3)
- Please describe your experience of PRA SS2/21 and operational resilience (SS1/21)
- Please describe your expereince in supplier risk, performance, and relationship management
- Please describe your ability to translate regulatory requirements into practical controls, frameworks, and SOPs.
