Third Party Risk Analyst

About this job

G MASS is partnering with a global bank as it builds out its register of material third-party arrangements under the new UK regime for third-party reporting. This is a client-side contract role, reporting into the project lead for the bank’s material third-party register programme. The framework has already been designed and tested through a voluntary data submission, so the focus now is execution: working through the bank’s population of third-party arrangements, establishing which are material, and compiling the data needed to populate the register. The work runs in two parallel swimlanes. The first is assessing third-party arrangements against a defined set of criteria, coordinating input from stakeholders in the UK and overseas. The second is sourcing the detailed data fields required for each arrangement assessed as material, drawing on a range of internal repositories. The register supports the bank’s obligations under the PRA and FCA policy statements on operational incident and third-party reporting (PRA PS7/26 and FCA PS26/2). The role suits someone early in their career in third-party risk management, outsourcing, or a related control function, who is meticulous with data and comfortable keeping a large number of moving parts on track. This is an initial 6-month contract based in the bank’s London office four days per week. The role is expected to start in late October / early November 2026. Key Responsibilities • Work through a large population of third-party arrangements, assessing each against the established criteria and recording outcomes consistently. • Coordinate assessment input from relationship owners and stakeholders across the UK and overseas, gathering information efficiently while maintaining good working relationships. • Support the identification of material arrangements and help confirm the in-scope population for the register. • Source the required data fields for each material arrangement from internal repositories, contracts and system records. • Compile and maintain the register in line with the regulatory template, ensuring the data is accurate, complete and consistently formatted. • Track progress across both workstreams, maintaining trackers, chasing outstanding items and reporting status to the project lead. • Flag data gaps, inconsistencies and fields with no identified source, escalating them with a clear view of what is missing. • Keep a clear record of evidence and data sources so the register can be reviewed and refreshed in future reporting cycles. • Support the project lead as the approach is refined, including ad hoc analysis and collation. Requirements • Experience in third-party risk management, outsourcing, vendor management, or a related risk and control function within financial services. • Exposure to maintaining or populating an outsourcing or third-party register. • Familiarity with PRA SS2/21, the PRA / FCA third-party reporting policy statements, or the EBA Guidelines on outsourcing arrangements is an advantage, but not essential. • Exceptional attention to detail, with the ability to work accurately across large volumes of data. • Strong organisational and PMO skills, including maintaining trackers, managing deadlines and collating information from multiple sources. • Confident stakeholder management, with the ability to obtain information from busy stakeholders across locations and time zones. • Strong Excel skills. • Clear, concise written communication. Benefits Length: initial 6-months contract, with strong likelihood to extend Salary: up to £40k