Senior Operations Manager- Third Party Risk and Resilience

About the role

Own the end-to-end third-party operational lifecycle, from initial onboarding and technical integration to continuous monitoring and eventual offboarding. Build and maintain strong, strategic relationships with key external partners, acting as the primary point of escalation for operational bottlenecks and service disruptions.

What you'll do

• Own the end-to-end third-party operational lifecycle, from initial onboarding and technical integration to continuous monitoring and eventual offboarding.
• Build and maintain strong, strategic relationships with key external partners, acting as the primary point of escalation for operational bottlenecks and service disruptions.
• Lead the implementation and ongoing management of ICT third-party risk management controls in strict alignment with DORA requirements.
• Define, implement, and track rigorous KPIs and SLAs for all third-party providers.
• Conduct regular Quarterly Business Reviews (QBRs) and performance audits with key vendors to ensure continuous improvement and strict adherence to service availability targets.
• Design seamless operational workflows that integrate third-party services into our internal value chain without friction.
• Partner with InfoSec, Compliance, and Risk teams to conduct regular vendor risk assessments, evaluate concentration risks, and ensure third parties participate in required operational resilience testing.

What you'll need

• 5+ years of experience in Operations, Vendor Management, or Third-Party Risk Management (TPRM), specifically within a regulated financial, FinTech, or SaaS environment.
• Regulatory knowledge (DORA), particularly its pillars relating to ICT third-party risk management, incident reporting, and resilience testing.
• Deep understanding of vendor due diligence, SLA formulation, and transitioning operational controls from detective to preventive models.
• Highly data-driven with the ability to build performance metrics and utilize data visualization tools (e.g., Looker, Snowflake, Excel/Google Sheets).
• Exceptional communication skills with the ability to collaborate effectively with technical teams, compliance officers, C-level executives, and external partners.
• Fluent in English and a good command of German (B2).

Nice to have

• Early adopter of AI productivity tools with a keen interest in how emerging AI governance impacts third-party risk and ICT resilience.

What they offer

• Employee Development Budget of €2,000 and four full training days per year.
• Flexible working hours, home office and 30 vacation days.
• Company pension scheme (Betriebliche Altersvorsorge) with 20% support.
• Urban Sports Club membership subsidy of €20+ per month.
• Deutschland Ticket subsidy of €25 per month.
• Relocation support available.