Third-Party Risk Management Consultant

G MASS are supporting a major UK regulatory initiative for a leading Investment Bank, focused on PRA/FCA third-party risk management requirements, emerging from the latest consultation and policy updates aligned to UK Operational Resilience frameworks and DORA-style regulation.

We are seeking an experienced Operational Resilience / TPRM Consultant to support the implementation of enhanced third-party risk management controls, regulatory registers, and governance processes across a complex financial services environment.

This role will operate at the intersection of programme delivery, regulatory interpretation, and stakeholder coordination, with a strong emphasis on Third Party Risk Management (TPRM). The successful consultant will help drive delivery activity, coordinate implementation tracking, and ensure alignment with evolving PRA/FCA expectations as regulatory guidance continues to develop through 2026.

The role reports into senior programme leadership and will work closely with Compliance, Operational Resilience, Risk, Technology, and BAU teams.

Responsibilities

• Support delivery of a UK regulatory initiative focused on PRA/FCA third-party risk management requirements and operational resilience obligations
• Lead coordination and tracking of TPRM-related implementation activities across multiple workstreams
• Interpret evolving PRA/FCA consultation papers, policy statements, and DORA-aligned requirements, translating regulatory expectations into actionable delivery plans
• Manage and maintain implementation trackers covering analysis, design, build, test, and deployment milestones
• Run fortnightly governance and delivery meetings with Compliance stakeholders and BAU owners to track progress against regulatory requirements
• Monitor delivery progress, identify delays or risks, and escalate issues to senior programme leadership where required
• Support the collation, validation, and maintenance of third-party and vendor information required for regulatory registers
• Work closely with Operational Resilience, Risk, Compliance, and Technology teams to ensure consistent implementation approaches
• Maintain oversight of regulatory dependencies, implementation milestones, and evolving policy changes