Third Party Risk Analyst

G MASS is partnering with a global bank as it builds out its register of material third-party arrangements under the new UK regime for third-party reporting.

This is a client-side contract role, reporting into the project lead for the bank's material third-party register programme. The framework has already been designed and tested through a voluntary data submission, so the focus now is execution: working through the bank's population of third-party arrangements, establishing which are material, and compiling the data needed to populate the register.

The work runs in two parallel swimlanes. The first is assessing third-party arrangements against a defined set of criteria, coordinating input from stakeholders in the UK and overseas. The second is sourcing the detailed data fields required for each arrangement assessed as material, drawing on a range of internal repositories. The register supports the bank's obligations under the PRA and FCA policy statements on operational incident and third-party reporting (PRA PS7/26 and FCA PS26/2).

The role suits someone early in their career in third-party risk management, outsourcing, or a related control function, who is meticulous with data and comfortable keeping a large number of moving parts on track. This is an initial 6-month contract based in the bank's London office four days per week. The role is expected to start in late October / early November 2026.

Key Responsibilities

• Work through a large population of third-party arrangements, assessing each against the established criteria and recording outcomes consistently.
• Coordinate assessment input from relationship owners and stakeholders across the UK and overseas, gathering information efficiently while maintaining good working relationships.
• Support the identification of material arrangements and help confirm the in-scope population for the register.
• Source the required data fields for each material arrangement from internal repositories, contracts and system records.
• Compile and maintain the register in line with the regulatory template, ensuring the data is accurate, complete and consistently formatted.
• Track progress across both workstreams, maintaining trackers, chasing outstanding items and reporting status to the project lead.
• Flag data gaps, inconsistencies and fields with no identified source, escalating them with a clear view of what is missing.
• Keep a clear record of evidence and data sources so the register can be reviewed and refreshed in future reporting cycles.
• Support the project lead as the approach is refined, including ad hoc analysis and collation.

• Experience in third-party risk management, outsourcing, vendor management, or a related risk and control function within financial services.
• Exposure to maintaining or populating an outsourcing or third-party register.
• Familiarity with PRA SS2/21, the PRA / FCA third-party reporting policy statements, or the EBA Guidelines on outsourcing arrangements is an advantage, but not essential.
• Exceptional attention to detail, with the ability to work accurately across large volumes of data.
• Strong organisational and PMO skills, including maintaining trackers, managing deadlines and collating information from multiple sources.
• Confident stakeholder management, with the ability to obtain information from busy stakeholders across locations and time zones.
• Strong Excel skills.
• Clear, concise written communication.

Length: initial 6-months contract, with strong likelihood to extend

Salary: up to £40k