Third Party Risk Analyst

G MASS is partnering with a global bank as it builds out its register of material third-party arrangements under the new UK regime for third-party reporting. This is a client-side contract role, reporting into the project lead for the bank’s material third-party register programme. The framework has already been designed and tested through a voluntary data submission, so the focus now is execution: working through the bank’s population of third-party arrangements, establishing which are material, and compiling the data needed to populate the register. The work runs in two parallel swimlanes. The first is assessing third-party arrangements against a defined set of criteria, coordinating input from stakeholders in the UK and overseas. The second is sourcing the detailed data fields required for each arrangement assessed as material, drawing on a range of internal repositories. The register supports the bank’s obligations under the PRA and FCA policy statements on operational incident and third-party reporting (PRA PS7/26 and FCA PS26/2). The role suits someone early in their career in third-party risk management, outsourcing, or a related control function, who is meticulous with data and comfortable keeping a large number of moving parts on track. This is an initial 6-month contract based in the bank’s London office four days per week. The role is expected to start in late October / early November 2026.

Key Responsibilities Work through a large population of third-party arrangements, assessing each against the established criteria and recording outcomes consistently. Coordinate assessment input from relationship owners and stakeholders across the UK and overseas, gathering information efficiently while maintaining good working relationships. Support the identification of material arrangements and help confirm the in-scope population for the register. Source the required data fields for each material arrangement from internal repositories, contracts and system records. Compile and maintain the register in line with the regulatory template, ensuring the data is accurate, complete and consistently formatted. Track progress across both workstreams, maintaining trackers, chasing outstanding items and reporting status to the project lead. Flag data gaps, inconsistencies and fields with no identified source, escalating them with a clear view of what is missing. Keep a clear record of evidence and data sources so the register can be reviewed and refreshed in future reporting cycles. Support the project lead as the approach is refined, including ad hoc analysis and collation. Requirements Experience in third-party risk management, outsourcing, vendor management, or a related risk and control function within financial services. Exposure to maintaining or populating an outsourcing or third-party register. Familiarity with PRA SS2/21, the PRA / FCA third-party reporting policy statements, or the EBA Guidelines on outsourcing arrangements is an advantage, but not essential. Exceptional attention to detail, with the ability to work accurately across large volumes of data. Strong organisational and PMO skills, including maintaining trackers, managing deadlines and collating information from multiple sources. Confident stakeholder management, with the ability to obtain information from busy stakeholders across locations and time zones. Strong Excel skills. Clear, concise written communication. Benefits Length: initial 6-months contract, with strong likelihood to extend Salary: up to £40k