Third Party Risk Manager

The Third Party Risk Management (TPRM) team is part of the Compliance function and plays a central role in safeguarding Raisin Bank's operational resilience. As a Second Line of Defense team, you will define, maintain, and oversee group-wide standards and controls related to third-party risk.

What you'll do

• Act as deputy to the TPRM function lead, coordinating priorities, quality assurance, and representing the team in senior and cross-functional forums.
• Own and evolve core frameworks, policies, and standards for Third Party Risk Management across the group.
• Lead third-party risk assessments from pre-assessment to onboarding and lifecycle review, ensuring regulatory alignment and meaningful challenge.
• Collaborate with Control Functions to identify risks, define mitigations, and escalate "showstopper" concerns where necessary.
• Monitor third-party performance and compliance through KPIs, SLAs, control testing, incident tracking, and business continuity reviews.
• Support contractual risk oversight in coordination with Legal and Procurement, ensuring identified risks are appropriately mitigated.
• Advise on and review changes to outsourcing arrangements, including scope updates, subcontracting, and exit strategies.
• Contribute to regulatory and Management Board reporting, including disclosures related to material outsourcing and ICT providers.

What you'll need

• Senior-level experience in Third Party Risk Management, outsourcing governance, vendor risk oversight, or comparable risk and compliance roles within regulated financial services.
• Hands-on experience with material outsourcing and/or critical ICT service providers.
• Deep familiarity with MaRisk AT 9, EBA Outsourcing Guidelines, and DORA (Chapter V), including practical implementation across functions.
• Understanding of ICT services, operational resilience, business continuity, subcontracting, and fourth-party risk.
• Skilled in applying risk assessment frameworks, managing assurance activities, reviewing KPIs/KRIs, and tracking audit findings.
• Comfortable working independently, owning complex risk topics, and engaging effectively with senior stakeholders.
• Fluent in English (required); German language skills are a strong advantage.

What they offer

• Employee Development Budget of €2,000 and four full training days per year.
• Flexible working hours, home office and 30 vacation days.
• Company pension scheme (Betriebliche Altersvorsorge) with 20% support.
• Urban Sports Club membership subsidized with €20+ per month.
• Deutschland Ticket subsidized with €25 per month.
• Relocation support available.