Senior Associate, Third Party Risk Management

The role

You will conduct end-to-end third-party risk assessments and due diligence on external suppliers. You will also validate vendor compliance documentation and drive strategic process improvements using AI and automation.

What you will do

• Conduct end-to-end third-party risk assessments, minimum due diligence, and control evaluations.
• Review and analyze vendor compliance documentation to validate cybersecurity and operational resilience.
• Identify control gaps in vendor controls.
• Work with vendors to agree on and track remediation actions.
• Manage a continuous pipeline of vendor assessments within service level expectations.
• Act as a key point of contact for internal business owners and Procurement.
• Support strategic initiatives leveraging AI and automation tools.
• Take ownership of agile, ad hoc risk management projects.

Required qualifications

• 5+ years of proven experience in Third-Party Risk Management, IT Risk, IT Audit, or a closely related Information Security Governance role.
• Strong working knowledge of global security and risk frameworks, including ISO standards and SOC reporting.
• Strong foundation in Third-Party Risk Management (TPRM) methodologies, cybersecurity principles, and data privacy regulations.
• Highly organized with a strong sense of ownership.
• Experience mentoring peers, managing complex workloads, and acting as an escalation point for junior team members.
• Excellent written and verbal communication skills.
• Highly analytical with a track record of driving process standardization.
• Experience with, or a strong aptitude for, utilizing Artificial Intelligence (AI) and automation.
• Ability to work independently and as part of a team.
• Flexibility to align working hours to support the UK time zone.

About the company

Checkout.com enables over 10 billion transactions yearly for more than one billion global shoppers. The company has 20 offices across six continents with London as its HQ.