Third Party Risk Management Lead

Join Cboe Europe as the Third Party Risk Management Lead. In this role, you will be responsible for managing the third party risk lifecycle, implementing regulatory requirements, and strengthening the resilience of trading services. You will work closely with various teams, enhance first-line processes, and support senior management in driving operational excellence and regulatory compliance.

At least five years’ experience in outsourcing and third party risk management, technology risk, or operational resilience within a regulated financial services environment

Responsibilities

• Coordination and management of the third party risk lifecycle, including inventory and classification, risk-based due diligence, contracting, ongoing monitoring, exit planning, and regulatory reporting.
• Collaboration with cross-functional teams to strengthen the resilience of trading services and ensure compliance with regulatory requirements, including the Digital Operational Resilience Act (DORA) and the FCA’s new operational incident and material third party reporting regime.
• Implementation of AI-driven solutions to automate due diligence, register maintenance, evidence gathering, monitoring, and regulatory reporting, enhancing the efficiency and effectiveness of third party risk management processes.
• Excellent written and verbal communication skills, with the credibility to discuss risk trade-offs with engineers, product owners, and vendors rather than citing policy
• Working knowledge of DORA Chapter V on ICT third party risk, the EBA Guidelines on Outsourcing Arrangements, and FCA and PRA outsourcing and third party expectations
• Experience using AI-driven scalability to enhance due diligence, evidence review, data handling, and records maintenance

Requirements

• Experience with IT Asset Management, Software Asset Management or related practices
• Strong stakeholder management skills, with the ability to influence effectively across the business teams and management structures. Highly organised, with a pragmatic, risk-based mindset and the ability to manage a large portfolio of third parties

Preferred

• Experience running due diligence and ongoing monitoring across material third parties, including critical or important outsourcing arrangements and ICT services supporting critical or important functions