Senior Operations Manager – Third Party Risk and Resilience

About the role

Own the end-to-end third-party operational lifecycle, from initial onboarding and technical integration to continuous monitoring and eventual offboarding. Lead the implementation and ongoing management of ICT third-party risk management controls in strict alignment with DORA requirements.

What you'll do

• Own the end-to-end third-party operational lifecycle, from initial onboarding and technical integration to continuous monitoring and eventual offboarding.
• Build and maintain strong, strategic relationships with key external partners, acting as the primary point of escalation for operational bottlenecks and service disruptions.
• Lead the implementation and ongoing management of ICT third-party risk management controls in strict alignment with DORA requirements.
• Maintain an accurate and up-to-date Register of Information detailing all ICT third-party service dependencies.
• Define, implement, and track rigorous KPIs and SLAs for all third-party providers.
• Conduct regular Quarterly Business Reviews (QBRs) and performance audits with key vendors to ensure continuous improvement and strict adherence to service availability targets.
• Design seamless operational workflows that integrate third-party services into our internal value chain without friction.
• Transition reactive, detective vendor controls into automated, preventive systems to build stronger system-based safeguarding mechanisms.

What you'll need

• 5+ years of experience in Operations, Vendor Management, or Third-Party Risk Management (TPRM), specifically within a regulated financial, FinTech, or SaaS environment.
• Regulatory knowledge, particularly DORA's pillars relating to ICT third-party risk management, incident reporting, and resilience testing.
• Deep understanding of vendor due diligence, SLA formulation, and transitioning operational controls from detective to preventive models.
• Highly data-driven with the ability to build performance metrics and utilize data visualization tools (e.g., Looker, Snowflake, Excel/Google Sheets).
• Exceptional communication skills with the ability to collaborate effectively with technical teams, compliance officers, C-level executives, and external partners.
• Fluent in English and a good command of German (B2).

Nice to have

• Early adopter of AI productivity tools with a keen interest in how emerging AI governance impacts third-party risk and ICT resilience.

What they offer

• Employee Development Budget of €2,000 and four full training days per year.
• Flexible working hours, home office and 30 vacation days.
• Company pension scheme (Betriebliche Altersvorsorge), supported with 20%.
• Urban Sports Club membership subsidy of more than €20 per month.
• Deutschland Ticket subsidy of €25 per month.
• JobRad bike leasing with insurance costs covered by Raisin.