Outsourcing & Third Party Risk Specialist – Financial Conduct Authority Careers Eccleston

Overview

Position Title: Outsourcing & Third Party Risk Specialist

Company: Financial Conduct Authority

Location: Eccleston, UK

Job Description

TRC works to ensure our regulated firms are resilient to disruption, with the aim of protecting consumers and markets and building confidence in the effectiveness of technology that underpins financial services. We are particularly focused on the importance of supply chain issues and the growing dependence firms have on third party services e.g. cloud technology, in the delivery of firms’ important business services. At a time of rapid technology change and increasing cyber threats, you will have the opportunity to lead our thinking in this area and influence the FCA, industry and international agendas to work in the public interest. This includes developing and taking forward the FCA’s joint work with PRA and HMT on Critical Third Parties (https://www.fca.org.uk/publications/discussion-papers/dp22-3-operational-resilience-critical-third-parties-uk-financial-sector), while also leading our thinking on how we ensure firms appropriately manage their third party, technology outsourcing and supply chain risks.

Responsibilities:

• Develop the FCA’s policy approach to managing the risks posed by third parties to the financial sector, including taking forward the FCA, PRA and HMT discussion on Critical Third Parties.
• Lead a “service line” of TRC specialists in developing the FCA’s thinking / knowledge and driving through new initiatives on third party service providers and technology outsourcing.
• Lead colleagues in defining the core objectives and strategy relating to third party service providers and technology outsourcing, helping further develop existing tools, whilst leading industry engagement and cross authority work in this area.
• Support colleagues, including supervisors and FCA senior management, while demonstrating a recognised level of expertise in the subject matter.
• Share knowledge and experience through partnering, education and consulting based on the subject matter.
• Support TRC firm leads in firm assessments (desk or visit-based) to provide supervisors with a forward-looking judgement-based assessment, supported by the facts, on whether a firm’s arrangements provide sufficient comfort or recommending action points for further review.

Requirements:

• At least 5 years’ experience regulating or managing third party, supply chain and technology outsourcing risks within industry (ideally in the financial sector).
• At least 2 years’ experience leading business service continuity and incident management practice standards such as ITIL and ISO (business continuity, disaster recovery and incident management-related).
• Third party and technology outsourcing risk relevant qualifications such as Certified Cloud Security Professional (CCSP), ISO (outsourcing related), other vendor management, or other outsourced IT audit programme.