TPRM Manager
Permanent - Full TimeJob Overview
CFC is building a formal Third‑Party Risk Management (TPRM) capability for the first time. Following the development of a new TPRM framework, this role will take ownership of embedding, operating, and continuously improving that framework across the organisation.
The TPRM Manager will work closely with Procurement, Risk, Compliance and other business teams to ensure third‑party risk activities are aligned with supplier onboarding, contract oversight and ongoing supplier governance. The role will also support CFC’s Operational Resilience programme, ensuring third‑party dependencies and critical suppliers are properly assessed and monitored.
This is a hands‑on, business‑facing 1st Line of Defence role requiring strong judgement, stakeholder engagement and the ability to make a new framework practical, scalable and embedded in day‑to‑day decision‑making.
About the role
This role puts you at the centre of how CFC manages, understands, and mitigates third‑party risk — a critical capability in a highly regulated, fast‑moving insurance business.
You’ll own and continuously improve CFC’s Third Party Risk Management (TPRM) framework, ensuring it remains robust, consistent, and aligned with evolving regulatory expectations from bodies such as the FCA and Lloyd’s. Working closely with Procurement, Risk, Legal, IT and the wider business, you’ll help embed clear, practical risk processes across the full supplier lifecycle — from onboarding through to renewal and exit.
A key part of the role involves leading supplier risk assessments and due diligence, coordinating inputs across operational, information security, financial, legal and regulatory domains. You’ll bring these perspectives together into clear, actionable recommendations for contract owners and senior stakeholders, helping the business make confident, informed decisions while maintaining appropriate controls and mitigations.
You’ll also play an important role in strengthening CFC’s Operational Resilience, mapping critical third‑party dependencies, identifying key suppliers linked to important business services, and tracking remediation actions where risks are identified. Your work will directly support regulatory self‑assessments, resilience documentation, and ongoing assurance activity.
Beyond day‑to‑day delivery, you’ll act as a trusted point of contact for TPRM across the organisation, providing guidance, training, and support to help teams understand their supplier risk obligations. You’ll develop insightful dashboards and reporting for senior forums, maintain strong governance and audit trails, and help evolve how we use technology — including our newly implemented TPRM system — to improve efficiency, visibility, and control.
This is a role with real visibility, influence, and impact: combining regulatory rigour with continuous improvement, stakeholder engagement, and the opportunity to shape how supplier risk is managed across CFC.
About you
- Minimum 5 years’ experience in Third Party Risk Management
- Understanding of FCA Outsourcing & Third‑Party Risk expectations.
- Experience in Financial Services, Insurance or other regulated industries
- Experience supporting or working within Operational Resilience frameworks.
- Experience conducting due diligence or supplier risk assessments across multiple risk domains.
- Familiarity with procurement processes, supplier lifecycle management or vendor governance (advantageous).