Third Party Risk Lead, Group

Primary Details

• Location: London / Sydney

• Type: Permanent, full time

• Hybrid role, Happy to talk flexible working

The opportunity

Our Group Third Party Risk team (a line 1 function) is responsible for the overall governance and management framework for third parties at an enterprise level, including setting policies and standards, and ensuring effective governance, oversight and control is in place.   

The team works collaboratively with third party risk teams in the operating divisions and plays a key role in ensuring that relevant local requirements are represented in enterprise frameworks, and that emerging regulations and emerging risks are considered.  They work with the business, procurement, risk domain owners and line 2 risk in driving adoption of new compliance to new policies and regulations and in building an understanding of our overall risk profile, controls and mitigations.  

We are expanding our team and are seeking experienced risk practitioners to join our Third Party Risk Management function, where you will be part of the team responsible for continuous adaption of the third party governance framework.

Your new role

• Design, build, implement and maintain a structured Third-Party governance framework, including controls, monitoring, reporting and escalation mechanisms across the end-to-end Third-Party Lifecycle;

• Provide effective oversight of Third-Party risk in accordance with internal policy and relevant legal and regulatory requirements;

• In collaboration with Risk Subject Matter Experts, create and maintain a library of tools, templates and other relevant materials allowing stakeholders to assess and manage 3rd party risk in line with QBE Third Party Risk Appetite;

• Communicate and train stakeholders across all QBE Divisions to ensure Third Party Risk Management requirements are understood and adopted;

• Lead assessment exercises of Third-Party risk at a macro level; oversee the development of mitigation plans and partner with internal stakeholders to assign monitoring responsibility;

• Submit regular stakeholder reporting to provide assurance that Third Party risk controls are in place and operating effectively; where issues are identified ensure remedial plans are in place and delivered;

• Partner with teams across the wider business functions to help ensure that all risk assessment and mitigation requirements have been met; risk is monitored & mitigated throughout the Third Party lifecycle

About you

You will be an experienced risk practitioner, savvy and pragmatic, looking for simple ways to get work done across a complex operating landscape of global functions and geographic P&Ls.  You will be hands on and will have a bias towards driving activities to improve our risk posture.  The role is global in nature so you will enjoy being exposed to the global regulatory landscape and working with international colleagues. 

• In-depth understanding of 3rd Party Risk and Control frameworks along with a good understanding of 3rd Party Risk management & reporting

• Excellent communication skills with the ability to communicate at all levels;

• Stakeholder Management and ability to interact at all levels of the organisation;

• Excellent organizational skills, ideally with Project Management experience;

• Ability to learn quickly and adapt in a complex environment;