TPRM - Subject Matter Expert — Tactical Remediation
Summary
Subject matter expert supporting a banking client's third-party risk management: drives tactical remediation to keep cyber risk within tolerance, embeds financial crime/internal fraud prevention processes, coordinates stakeholders and prepares decision materials. 12-month B2B contract, hybrid from Krakow, English-speaking.
Industry: banking
Work model: full-time, hybrid - ideally 6 days/month on-site from Krakow, but we’re flexible in this matter
Project language: English
Business trips: n/a
Project length: 12 months contracts + prolongations.
Start: ASAP
Assignment type: B2B
The Subject Matter Expert will support tactical remediation efforts designed to maintain cyber risk within tolerance and oversee the embedding of the Financial Crime/Internal Fraud prevention process. The role will coordinate activity across stakeholders, drive timely completion of actions and help ensure that remediation outcomes are sustainable.
Key responsibilities
● Support the planning and delivery of tactical remediation activities.
● Help maintain relevant risk exposure within agreed tolerance.
● Coordinate activities and deliverables across business, risk, procurement, technology, compliance and control stakeholders.
● Track actions, dependencies, risks, issues and decisions.
● Support the embedding of the new process into relevant business and control activities.
● Assess the effectiveness and sustainability of remediation actions.
● Identify gaps in processes, controls, ownership or governance.
● Facilitate workshops and stakeholder discussions.
● Prepare status updates, options papers and decision materials.
● Follow up proactively to ensure actions are completed on time.
● Escalate delays, blockers and emerging risks through the appropriate governance channels.
● Maintain clear records of decisions, evidence and remediation outcomes.
● Support the transition of tactical solutions into sustainable business-as-usual arrangements where appropriate.
Experience and qualifications
● 4–5 years of relevant professional experience in third-party risk, procurement, supplier/vendor management, cyber risk, financial crime risk, internal fraud risk, operational risk, control remediation or related change delivery.
● Experience supporting third-party risk management engagements is preferred.
● Basic to intermediate understanding of cyber risk.
● Basic to intermediate understanding of financial crime and internal fraud risk.
● Experience coordinating remediation activities across multiple stakeholders.
● Experience working in a regulated, risk-controlled or governance-focused environment.
● Experience supporting process embedding, control implementation or operational change.
● Experience in banking, financial services or another regulated industry would be advantageous.
● Relevant qualifications in risk, compliance, procurement, audit, project management or a related discipline would be beneficial.
Key skills and behaviours
● Strong critical-thinking and structured problem-solving capability.
● Strong analytical skills and attention to detail.
● High level of proactivity and independent judgement.
● Ability to coordinate contributions from diverse stakeholder groups.
● Strong follow-up and delivery discipline, with a focus on getting actions completed promptly.
● Effective interpersonal, communication and negotiation skills.
● Ability to manage competing priorities and work at pace.
● An Agile mindset, with the ability to adapt and iterate quickly.
● Strong stakeholder management skills and confidence in challenging constructively.
● Ability to identify control weaknesses, risks and potential unintended consequences.
● Ability to explain cyber, financial crime and internal fraud risks clearly to relevant audiences.
● Broad knowledge of banking and financial services, supported by relevant functional expertise.
Indicative success measures
● Tactical remediation actions are delivered within agreed timelines.
● Risk exposure remains within the required tolerance.
● Stakeholder responsibilities, dependencies and deadlines are clearly understood.
● The new process is embedded consistently and supported by appropriate evidence.
● Blockers and emerging risks are identified early and escalated appropriately.
● Remediation outcomes are sustainable and supported by clear ownership and governance.