Supplier Risk Manager

Tokio Marine HCC; Greater London; On-site; GBP 60,000 - GBP 80,000; Full time

Job summary

A leading specialty insurer in Greater London is seeking a Supplier Risk Manager to enhance their Supplier Risk Operating Model and ensure compliance with regulatory expectations. You will lead supplier risk governance and engage with European regulatory matters, collaborating closely with internal teams. The ideal candidate has extensive experience in Supplier Risk Management within Financial Services, particularly in areas like Cyber Risk and Business Continuity Management. This role offers a competitive salary and employee benefits in a dynamic work environment.

Benefits

Competitive salary

Employee benefits package

Equal opportunity employer

Qualifications

• Significant experience in Supplier / Third-Party Risk Management within Financial Services.
• Proven expertise in Supplier Assurance, Due Diligence, and Audit processes.
• Strong understanding of regulatory frameworks including DORA and EBA Outsourcing Guidelines.

Responsibilities

• Lead redesign of Supplier Risk Operating Model to enhance regulatory compliance.
• Act as primary point of contact for European regulatory matters.
• Collaborate with internal stakeholders to manage supplier risks effectively.

Skills

Supplier Assurance

Due Diligence

Audit processes

Information Security & Cyber Risk

Business Continuity Management

Operational Resilience

Data Privacy (GDPR)

Concentration Risk

Financial Crime

Sustainability

Tools

FSQS

Agiloft

Job description

**Reporting to:** Procurement Excellence Manager**Direct Reports:** N/A**Position Type:** Permanent**Why**Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.**About Operations**Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen.From identifying the scope of the goods and services required to deliver business outcomes, to negotiating pricing and managing the full lifecycle of contracts and suppliers. Procurement focuses on delivering Value For Money for the organisation. We leverage market intelligence and navigate the regulatory landscape to achieve commercial outcomes and reduce risk and complexity.**Job Purpose:**The Supplier Risk Manager will lead the redesign and enhancement of TMHCC’s Supplier Risk Operating Model, ensuring alignment with evolving regulatory expectations, and best practice across the Financial Services sector.The role will act as a subject matter expert and delivery lead for supplier risk governance, assurance, and regulatory compliance, including DORA, Operational Resilience, and European regulatory engagement, while supporting key regulatory change initiatives (e.g. DyGIST, SS5/25).**Key Responsibilities:****1. Supplier Risk Operating Model Redesign*** Lead the review, redesign, and enhancement of the Supplier Risk Operating Model, including: + Policies and standards + End-to-end processes + Organisational structure and governance + Supplier risk segmentation and tiering + RACI models across the first and second lines* Assess current state maturity, identify gaps, and provide clear, prioritised recommendations aligned to regulatory expectations and industry best practice.* Review existing artefacts (policies, frameworks, templates, methodologies) and propose improvements or rationalisation.**2. Regulatory Compliance & Operational Resilience (BAU & Change)*** Lead BAU supplier risk regulatory compliance activities, ensuring continued adherence to UK and EU regulatory requirements.* Lead the DORA Supplier Risk workstream, including: + Identification and classification of ICT third-party providers + Contractual, oversight, and assurance requirements Coordination of evidence and regulatory readiness activities**3. European & External Engagement*** Act as the primary point of contact for European counterparties on supplier risk matters.* Support coordination and alignment across UK and European regulatory expectations.**4. Participate in working groups, and regulatory discussions to inform TMHCC’s approach to** **Regulatory Change & Strategic Initiatives*** Lead the DyGIST procurement and supplier workstream, ensuring supplier risk considerations are appropriately embedded.* Lead SS5/25 procurement and supplier related workstream.* Provide input into the development and enhancement of sourcing-related artefacts (e.g. Sourcing Policy, Supplier Code of Conduct) in collaboration with Procurement and policy owners, ensuring clear ownership and avoiding duplication of accountability.**5. Stakeholder Collaboration & Advisory*** Collaborate with internal stakeholders (Risk, Legal, Compliance, Data Protection, IT, Security, Operational Resilience and Business Owners) to ensure a joined-up approach to supplier risk management.* Provide expert challenge and guidance on high-risk suppliers, material outsourcing arrangements, and concentration risk.* Support senior management and governance forums with analysis, insights, and recommendations.**6. Continuous Improvement & Crisis Support*** Identify industry trends, emerging risks, and regulatory developments impacting supplier and third-party risk.* Recommend enhancements to TMHCC’s supplier risk framework and controls.* Provide crisis management support during supply chain disruptions, material incidents, or high-risk supplier events.**Performance Objectives:*** Delivery of BAU supplier risk activities and regulatory reporting.* End-to-end process, policy and framework review.**Skills and Experience Specification:****Essential:*** Significant, demonstrable experience in Supplier / Third-Party Risk Management within Financial Services.* Proven expertise in Supplier Assurance, Due Diligence, and Audit processes.* Deep knowledge of key supplier risk domains, including: + Concentration Risk + Information Security & Cyber Risk + Business Continuity Management (BCM), Operational Resilience & Exit Planning + Data Privacy (e.g. GDPR) + Financial Crime (FinCrime) + Modern Slavery Act compliance + Sustainability* Strong understanding of relevant regulatory and legal frameworks, including: + SS1/21, SS2/21 + DORA + EBA Outsourcing Guidelines + Critical Third Parties (CTPs) + SYSC 8 + SS5/25 + DyGIST + CP17/24 + OCIR / Operational Resilience policy landscape* Familiarity with TPRM systems, (ideally any experience of FSQS and Agiloft) tooling, and supplier risk data management.* Strong understanding of the Financial Services risk agenda.**Desirable:*** Ability to simplify complex regulatory and risk concepts into clear, actionable outputs.* Demonstrable experience in business process design and continuous improvement.* Strong project and programme delivery experience in complex regulatory environments.**What We Offer**The Tokio Marine HCC Group of Companies offers a competitive salary and employee benefit package. We are a successful, dynamic organization experiencing rapid growth and are seeking energetic and confident individuals to join our team of professionals.The Tokio Marine HCC Group of companies is an equal opportunity employer. Please visit for more information about our companies.#LI-PS1**Job Title:** Supplier Risk Manager**Operations is made up of 7 functions, this role sits within: Procurement and Workplace Management**