Head of Group Third Party Management & Governance

Primary Details

• Location: London / Sydney

• Type: Permanent, full time

• Hybrid role, Happy to talk flexible working

The opportunity

Our Group Third Party Risk team (a line 1 function) is responsible for the overall governance and management framework for third parties at an enterprise level, including setting policies and standards, and ensuring effective governance, oversight and control is in place.   

The team works collaboratively with third party risk teams in the operating divisions and plays a key role in ensuring that relevant local requirements are represented in enterprise frameworks, and that emerging regulations and emerging risks are considered.  They work with the business, procurement, risk domain owners and line 2 risk in driving adoption of new compliance to new policies and regulations and in building an understanding of our overall risk profile, controls and mitigations.  

We are currently seeking a new leader for the function as we evolve our approach to incorporate the requirements of new regulations such as CPS230 for APRA regulated entities and the Digital Operations Resilience Act (DORA) in the EU, and as we move to the next stage in our maturity journey.

Your new role

As the leader of the group TPRM team, you will be responsible for the implementation and effectiveness of the third party risk management framework across the enterprise.  You will provide direct leadership to the group TPRM team in setting policy, standards and processes, but will also use significant collaboration and influencing skills as you engage with the broader TPRM community and other parts of the QBE organisation to support a general uplift in the management of third-party risk exposures, understand the third party risk exposures that exist in different parts of our global organization and integrate them into an understanding of QBE’s overall third party risk exposure and mitigating controls.  In conjunction with other leaders in Operational Risk, Business Continuity and IT/Cyber risk, your leadership and expertise will help strengthen QBE’s overall approach to building operational resilience.  

About you

You will be an experienced and seasoned risk practitioner with a deep knowledge of third-party risk regulations and requirements.  You’ll bring a strategic mindset to setting the structure and approach to frameworks, policies and processes that can be practically implemented across QBE’s complex landscape of operating divisions and geographic P&Ls.   

• Demonstrable experience of having designed, built and implemented Third Party Management Capability across the end-to-end Third-Party Lifecycle in large scale, complex, global, highly regulated organisations

• Expert understanding of 3rd Party Risk and Control frameworks

• Excellent communication skills with the ability to communicate at all levels;

• Stakeholder Management and ability to interact at all levels of the organisation;

• Excellent organizational skills, ideally with Project Management experience;

• Ability to learn quickly and adapt in a complex environment;