3rd Party Risk Manager

Job Title: 3rd Party Risk Manager - Internal Audit

Location: Madrid, Spain

Reports to: Head of Internal Audit

Company Overview:

Audit & Risk Recruitment is partnering with a global financial services business undergoing a period of strong growth and transformation. As part of this expansion, the company is strengthening its global Internal Audit team and seeking an experienced Internal Audit Manager – Third Party Assurance to join its Madrid-based function. This is a high-impact role offering significant visibility across the business, with a mandate to shape the organisation’s assurance strategy and build a best-in-class third-party assurance framework.

The 3rd Party Risk Manager role will act as a key strategic partner to the Head of Internal Audit, helping to define and deliver the company’s global assurance strategy and annual audit plan. The role will focus on establishing a continuous third-party assurance framework to monitor, assess, and report on the performance and risk of critical external service providers. This individual will play a crucial role in ensuring compliance with evolving regulatory expectations around operational resilience and outsourcing.

Key Responsibilities:

- Third Party Assurance: Design, implement, and manage a continuous monitoring framework to assess third-party risk and compliance, ensuring alignment with regulatory, contractual, and operational resilience requirements.
- Audit Delivery: Plan, execute, and report on audits focused on third-party management, outsourcing arrangements, and supplier governance.
- Regulatory Insight: Stay abreast of evolving regulatory developments, including FCA PS21/3 , DORA , and other global operational resilience frameworks, interpreting their implications for the organisation’s assurance approach.
- Stakeholder Engagement: Collaborate with senior leaders in Risk, Procurement, Technology, and Operations to enhance oversight of key third-party relationships.
- Reporting & Communication: Produce clear, concise, and insightful audit reports that effectively communicate findings and recommendations to senior management.
- Continuous Improvement: Contribute to the ongoing enhancement of internal audit methodologies, data analytics, and assurance processes to improve effectiveness and efficiency.

What We’re Looking For:

- Minimum 6 years’ experience in internal audit, risk management, or third-party risk assurance within financial services or other regulated industries.
- Strong knowledge of operational resilience regulations , including FCA operational resilience and DORA .
- Proven ability to design and deliver assurance activities that drive meaningful risk insights and improvements.
- Excellent written and verbal communication skills, with the ability to produce clear and impactful audit reports.
- Demonstrated experience engaging with senior stakeholders and managing cross-functional relationships.
- Fluent in Spanish and English (both written and spoken).
- Must hold a valid EU passport .