Third-Party Risk Analyst

We are looking to hire a Third-Party Risk Analyst here at CMC. Third-Party Risk Management (TPRM) is a relatively new field within CMC, we are forming a new team within Procurement dedicated to comprehensively understanding and mitigating the risks posed by our suppliers.

As a Third-Party Risk Analyst, you will be at the forefront of this initiative, collaborating closely with key stakeholders across the organization to embed a robust assurance and governance framework. This role offers a unique opportunity to help shape the future of TPRM within our company, ensuring compliance with regulatory standards and internal policies while fostering a culture of risk awareness and mitigation on a global scale.

• Conduct thorough assessments of potential and existing third-party vendors to identify and evaluate associated risks.
• Monitor the activities and performance of third parties to ensure ongoing compliance, escalating risk issues as necessary.
• Responsible for the implementation and embedding of the Third-Party Risk Management Framework
• Management of the Third-Party Risk Database
• Delivery of targeted training and awareness to support the adherence to requirements.
• Establish a mechanism for identifying fourth- and fifth-party suppliers and capture them centrally.
• Ensure accuracy and completeness of third-party information in the due diligence database.
• Stay current with regulatory changes to enhance the third-party risk and due diligence program.

KEY SKILLS AND EXPERIENCE

Essential:

• Experience of third-party risk oversight
• Performing 3rd party risk assessments, review of external control and audit reports
• Ability to document and track risks using standardised and consistent methodologies.
• Knowledge of Procurement and Supplier Management
• Able to build strong relationships and credibility with stakeholders outside of own team.
• Excellent attention to detail
• Pragmatic and flexible approach

Desirable:

• Experience in Financial Services
• Knowledge and experience of operational resilience and other global regulatory requirements e.g. EBA Guidelines on Outsourcing, SS2/21, PS21/3, DORA etc.
• Experience of OneTrust Vendor Risk Management Platform

CMC Markets is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age.