Third Party Risk Analyst
At a glance
Mid-level Risk & Financial Compliance role at G MASS. London · contract · up to £40,000 base.
financeroles summary, based on the employer's posting.
What you'll do
- Assess third-party arrangements using the established criteria and record each result in a consistent way
- Gather assessment input from relationship owners and colleagues in the UK and overseas
- Find required details for material arrangements in internal repositories, contracts and system records, then maintain the register
- Monitor both workstreams, update trackers, follow up on open items and brief the project lead
- Record evidence sources, raise data gaps and inconsistencies, and support ad hoc analysis as the approach develops
What you bring
- Experience in third-party risk, outsourcing, vendor management or a related financial-services risk and control role
- Exposure to keeping an outsourcing or third-party register up to date
- Strong Excel ability and accuracy when handling substantial volumes of data
- Organisation, clear writing and the confidence to gather input from stakeholders in different locations
Who this fits
This role suits someone early in a third-party risk career who is meticulous with data and can keep multiple workstreams moving. It is a client-side contract based in a London bank office, with four on-site days each week. The initial term is six months, with a strong likelihood of extension, and the expected start is late October or early November 2026.
From the employer
G MASS is partnering with a global bank as it builds out its register of material third-party arrangements under the new UK regime for third-party reporting.
This is a client-side contract role, reporting into the project lead for the bank’s material third-party register programme. The framework has already been designed and tested through a voluntary data submission, so the focus now is execution: working through the bank’s population of third-party arrangements, establishing which are material, and compiling the data needed to populate the register.
The work runs in two parallel swimlanes. The first is assessing third-party arrangements against a defined set of criteria, coordinating input from stakeholders in the UK and overseas. The second is sourcing the detailed data fields required for each arrangement assessed as material, drawing on a range of internal repositories. The register supports the bank’s obligations under the PRA and FCA policy statements on operational incident and third-party reporting (PRA PS7/26 and FCA PS26/2).
The role suits someone early in their career in third-party risk management, outsourcing, or a related control function, who is meticulous with data and comfortable keeping a large number of moving parts on track. This is an initial 6-month contract based in the bank’s London office four days per week. The role is expected to start in late October / early November 2026.
Key Responsibilities
- Work through a large population of third-party arrangements, assessing each against the established criteria and recording outcomes consistently.
- Coordinate assessment input from relationship owners and stakeholders across the UK and overseas, gathering information efficiently while maintaining good working relationships.
- Support the identification of material arrangements and help confirm the in-scope population for the register.
- Source the required data fields for each material arrangement from internal repositories, contracts and system records.
- Compile and maintain the register in line with the regulatory template, ensuring the data is accurate, complete and consistently formatted.
- Track progress across both workstreams, maintaining trackers, chasing outstanding items and reporting status to the project lead.
- Flag data gaps, inconsistencies and fields with no identified source, escalating them with a clear view of what is missing.
- Keep a clear record of evidence and data sources so the register can be reviewed and refreshed in future reporting cycles.
- Support the project lead as the approach is refined, including ad hoc analysis and collation.
Requirements
- Experience in third-party risk management, outsourcing, vendor management, or a related risk and control function within financial services.
- Exposure to maintaining or populating an outsourcing or third-party register.
- Familiarity with PRA SS2/21, the PRA / FCA third-party reporting policy statements, or the EBA Guidelines on outsourcing arrangements is an advantage, but not essential.
- Exceptional attention to detail, with the ability to work accurately across large volumes of data.
- Strong organisational and PMO skills, including maintaining trackers, managing deadlines and collating information from multiple sources.
- Confident stakeholder management, with the ability to obtain information from busy stakeholders across locations and time zones.
- Strong Excel skills.
- Clear, concise written communication.
Benefits
Length: initial 6-months contract, with strong likelihood to extend
Salary: up to £40k