{"id":2443241,"url":"https://alion.io/job/cboe-third-party-risk-management-lead-2","title":"Third Party Risk Management Lead","company":{"id":47851,"name":"Cboe Global Markets","domain":"cboe.com","url":"https://alion.io/company/cboe","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-11T00:00:00Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-10-20T12:06:49Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Job Description\nCboe Europe is seeking an experienced Outsourcing and Third Party Risk Management Lead to support business owners, who hold first-line ownership of how Cboe Europe identifies, assesses, and manages the risks arising from its use of outsourcing, ICT, and other third party providers, as part of a global Infrastructure team You will run and coordinate the third party risk lifecycle in the first line of defence on behalf of business owners - inventory and classification, risk-based due diligence, contracting, ongoing monitoring, exit planning, and regulatory reporting - and lead implementation of the ICT third party requirements of the Digital Operational Resilience Act (DORA) and the FCA’s new operational incident and material third party reporting regime under PS26/2. Working with technology, operations, procurement, legal, compliance, and audit teams, you will strengthen the resilience of trading services used by hundreds of financial services firms across the UK and EU. The role takes an AI-first approach, automating due diligence, register maintenance, evidence gathering, monitoring, and regulatory reporting.\nThe successful candidate will operate and enhance first-line processes, procedures, and controls relating to outsourced, delegated, and third party arrangements. They will also support senior management in meeting their responsibilities while driving operational excellence, regulatory compliance, and continuous improvement across the organisation.\nIn this role, you will be responsible for:\nMaintaining the third party and ICT third party inventory, including:\nCboe Europe’s outsourcing register and DORA register of information, ensuring ICT services supporting critical or important functions are correctly identified, classified, and recorded.\nThe register of material third party arrangements required under FCA PS26/2 and FG26/4, kept submission-ready for return to the FCA.\nMapping of third parties to the business services, functions, processes, assets, and controls they support, including impact tolerances, RTOs, and RPOs.\nSubcontracting and nth-party chains for ICT services supporting critical or important functions, with concentration, substitutability, and geographic risk recorded.\nAutomated data quality, reconciliation, and evidence-gathering controls so register data stays accurate, complete, and examination-ready.\nStrengthening our First Line of Defence (1LOD) through robust procedures and controls aligned to Cboe's Third Party Management Policy, and a culture of continuous improvement\nRunning first-line third party risk assessment, due diligence, and contracting by:\nActing as the first point of contact for business owners on third party or outsourcing matters, guiding them through onboarding, including: risk assessment, contract review, and the approval process; approval decisions remain with business owners, subject to second-line sign-off for high-risk vendors.\nRunning proportionate, risk-based due diligence across information security, resilience, data protection, financial crime, financial soundness, and concentration risk, coordinating with subject matter experts to form a pragmatic view of third party relationships.\nPerforming the initial criticality and materiality assessment, applying DORA and FCA/PRA criteria to assess whether an arrangement supports a critical or important function or constitutes a material third party arrangement, subject to second-line review and challenge.\nWorking with Legal and Procurement to embed the DORA Article 30 contractual requirements, including service descriptions, data and processing locations, audit and access rights, subcontracting conditions, security and resilience requirements, incident assistance, and termination rights.\nDocumenting exit strategies, substitutability analysis, and stressed exit plans for ICT services supporting critical or important functions.\nWorking closely with Operational Resilience SMEs to design and deliver third party related resiliency testing, including severe but plausible supplier failure scenarios and, where in scope, the inclusion of third parties in relevant information security testing.\nLeading first-line implementation for third party risk by:\nSupporting first line teams with assessment, business impact analysis, and implementation planning for DORA Chapter V on ICT third party risk\nTranslating FCA PS26/2 and FG26/4 on material third party reporting into operational processes, technology changes, and first-line controls ahead of the 18 March 2027 implementation date.\nCoordinating cross-functional implementation with Technology, Operations, Legal, Procurement, and Product, embedding first-line control self-testing as the framework matures, and representing Third Party Management activities with second-line Compliance and Operational Risk.\nSupporting third party governance, monitoring, and regulatory reporting by:\nRunning the ongoing monitoring programme, including performance and service level reviews, control attestations, right-to-audit activity, and periodic re-assessment of material and critical third parties.\nPreparing regulatory returns and notifications for review and submission by the second line (Compliance), including the DORA register of information, the FCA register of material third party arrangements, and notifications of new or significantly changed material third party arrangements.\nWorking with compliance SMEs for operational and ICT incident reporting where a third party is involved, providing third party information to support Compliance's assessment against regulatory reporting criteria for UK and European entities.\nMaintaining third party risk management information and reporting to senior management, internal committees, and auditors.\nTracking and reporting remediation of due diligence findings, control gaps, audit actions, and contractual remediation programmes.\nActing as a key partner to the Operations, Technology, and Procurement functions.\nThe ideal candidate has:\nAt least five years’ experience in outsourcing and third party risk management, technology risk, or operational resilience within a regulated financial services environment.\nWorking knowledge of DORA Chapter V on ICT third party risk, the EBA Guidelines on Outsourcing Arrangements, and FCA and PRA outsourcing and third party expectations.\nExperience running due diligence and ongoing monitoring across material third parties, including critical or important outsourcing arrangements and ICT services supporting critical or important functions.\nExperience using AI-driven scalability to enhance due diligence, evidence review, data handling, and records maintenance.\nExcellent written and verbal communication skills, with the credibility to discuss risk trade-offs with engineers, product owners, and vendors rather than citing policy.\nStrong stakeholder management skills, with the ability to influence effectively across the business teams and management structures. Highly organised, with a pragmatic, risk-based mindset and the ability to manage a large portfolio of third parties.\nYou will stand out if you also have:\nExperience with IT Asset Management, Software Asset Management or related practices\nExperience driving supplier performance, governance and service delivery\nAbout Cboe\nAt Cboe, we lead the industry globally in tradeable products and services. We are committed to developing innovative products, delivering unparalleled service and offering cutting-edge trading technology. A career at Cboe means the chance to work for the industry leader and have a direct impact on Cboe’s continued success in the marketplace. The industry and technology professionals that make up the Cboe team are focused on keeping innovation and competition alive in the securities markets. We capitalize on our mix of seasoned and new talent to solve problems and bring solutions.\nAny communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any otherthird party communication tools for recruiting purposes.","description_format":"text","description_chars":8112,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Government","Law Enforcement","Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-13T12:45:43Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.885,"p_room":1,"age_days":9,"expected_fill_days":32,"reasons":["conf:7","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/cboe-third-party-risk-management-lead-2","json_url":"https://alion.io/job/cboe-third-party-risk-management-lead-2.json","meta":{"generated_at":"2026-10-20T18:36:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21442,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47851},"rest":"https://alion.io/mcp/rest/get_company?id=47851"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcboe-third-party-risk-management-lead-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcboe-third-party-risk-management-lead-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcboe-third-party-risk-management-lead-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cboe-third-party-risk-management-lead-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcboe-third-party-risk-management-lead-2"}]}