Third Party Risk Analyst

As a Risk Analyst, you will be at the forefront of this initiative, collaborating closely with key stakeholders across the organization to embed a robust assurance and governance framework. This role offers a unique opportunity to help shape the future of TPRM within our company, ensuring compliance with regulatory standards and internal policies while fostering a culture of risk awareness and mitigation on a global scale.

• Conduct thorough assessments of potential and existing third-party vendors to identify and evaluate associated risks.


• Monitor the activities and performance of third parties to ensure ongoing compliance, escalating risk issues as necessary.


• Responsible for the implementation and embedding of the Third-Party Risk Management Framework


• Management of the Third-Party Risk Database


• Delivery of targeted training and awareness to support the adherence to requirements.


• Establish a mechanism for identifying fourth- and fifth-party suppliers and capture them centrally.


• Ensure accuracy and completeness of third-party information in the due diligence database.


• Stay current with regulatory changes to enhance the third-party risk and due diligence program.


• Maintain personal/professional development to meet the changing demands of the role, including all relevant regulatory and legislative training.


• When dealing with all customers, clients or colleagues ensure that we provide a clear, fair and consistent high-quality service that presents a professional and positive image of CMC Markets;


• Take all reasonable steps to ensure appropriate confidentiality.


• Undertake such other duties, training and/or hours of work as may be reasonably required, and which are consistent with the general level of responsibility of this role.
  
  Essential:


• Experience of third-party risk oversight


• Ability to document and track risks using standardised and consistent methodologies.


• Knowledge of Procurement and Supplier Management


• Able to build strong relationships and credibility with stakeholders outside of own team.


• Excellent attention to detail


• Pragmatic and flexible approach


Desirable:

• Experience in Financial Services


• Knowledge and experience of operational resilience and other global regulatory requirements e.g. EBA Guidelines on Outsourcing, SS2/21, PS21/3, DORA etc.


• Performing 3rd party risk assessments, review of external control and audit reports


• Experience of OneTrust Vendor Risk Management Platform
  
  Third-Party Risk Management (TPRM) is a relatively new field within CMC, we are forming a new team within Procurement dedicated to comprehensively understanding and mitigating the risks posed by our suppliers.