Senior Third-Party Risk Officer

Working Model: Hybrid, with onsite working 2–3 days per week Working Hours: Monday to Friday, 9 am–6 pm Contract type: Full-time, Permanent Please note: For this position, we are unable to provide visa sponsorship now or in the future. Candidates must already have the permanent legal right to work in the country they apply to and be able to start and maintain employment without visa support from Convera. We are seeking a highly analytical and detail-oriented Senior Third-Party Risk Officer to join our Risk Function. In this role, you will play a key part in strengthening Convera’s Third-Party Risk Management (TPRM) framework by overseeing and assessing risks across our global vendor population. You will leverage data-driven insights and risk-based methodologies to conduct due diligence, monitor third-party exposures, challenge risk assessments, and support informed decision-making. The ideal candidate will bring strong experience in third-party risk management, vendor oversight, and risk governance, coupled with excellent stakeholder management and communication skills. Experience in operational resilience, ICT risk, outsourcing oversight, and financial services risk management is highly desirable. You will be responsible for: • Conducting and coordinating risk assessments across Convera’s vendor population, including due diligence, review of control evidence and clear, evidence-based inherent and residual risk conclusions. • Providing constructive challenge on control effectiveness and working with stakeholders to agree proportionate remediation, monitor progress and escalate material or overdue issues. • Supporting the completeness and quality of third-party data and the consistent application of risk segmentation and tiering, with a particular focus on the vendor population. • Performing periodic and event-driven monitoring using internal information and external risk intelligence to identify incidents, changes in risk, service resilience concerns and emerging issues. • Analysing third-party risk data and preparing clear reporting on assessment status, key risk indicators, material findings, risk trends and remediation progress. • Applying the TPRM operating model consistently and supporting practical improvements to methodology, workflow, data quality, reporting, automation and tools. • Providing practical guidance and subject-matter expertise to stakeholders and supporting audit, assurance, regulatory and wider risk governance activities. • Collaborating on Operational Resilience, ICT Risk and other relevant risk matters where third-party dependencies are a key consideration. • This is an opportunity to take a trusted and influential role in a growing global Risk Function and contribute to the continued maturity of Convera’s TPRM capability. You will have the autonomy to apply your judgement across a diverse range of third-party and broader risk matters, turn risk insight into practical action and collaborate with senior stakeholders and teams across the business while helping to protect Convera and its customers. You should apply if you have: • Strong practical experience in Third-Party Risk Management, with particular expertise in Vendor Risk Management, preferably within financial services, payments or another regulated environment. • Experience conducting complex third-party due diligence and risk assessments, reviewing control evidence, and forming clear inherent and residual risk conclusions. • A good understanding of key third-party risk domains, including information security, operational resilience, data privacy, compliance, financial viability and service performance. • Experience monitoring third-party risk, remediation actions and material changes, supported by strong analytical skills and clear m