SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Allica Bank is the UK's fastest-growing fintech firm, focused on serving established SMEs—a major underserved segment representing over a third of the UK economy. The bank works with 300+ third parties delivering critical services and is subject to demanding regulatory oversight from the PRA and FCA.
As Head of Third Party Management, you will design, own, and drive adoption of the end-to-end third-party management framework across the entire bank. This includes sourcing, contracting, onboarding, ongoing assurance, and exit management. You are accountable for ensuring third-party risk is understood, controlled, and held within appetite, and for the bank meeting all regulatory obligations for its third-party arrangements.
Your mandate is bank-wide. You set the standard, own the tooling and data, and hold the business accountable for consistent operation of the framework. While accountability for individual supplier relationships sits with relevant business owners, you measure adherence, work alongside owners to resolve outstanding issues, and escalate where necessary.
Key responsibilities include:
**Strategy & Framework:** Develop a coherent bank-wide operating model and third-party management strategy. Own policies and control requirements that apply proportionate scrutiny based on risk and materiality. Define decision rights, secure governance approvals, and ensure responsibilities are understood and evidenced in practice.
**Procurement & Commercial Management:** Create a consistent approach to demand, sourcing, benchmarking, negotiation, and renewal. Lead significant contract negotiations, bringing market insight and disciplined trade-offs. Ensure contracts serve as control instruments, reflecting service levels, audit rights, data security, business continuity, and exit requirements. Maintain forward visibility of procurement activity and renewals.
**Third-Party Risk & Governance:** Maintain an accurate, current third-party register with consistent materiality and risk assessments. Apply the framework consistently to intragroup arrangements. Set and oversee due diligence refresh cadence, service reviews, and control attestation. Require and test exit plans for critical services. Maintain portfolio-level visibility of concentration and dependency risk. Ensure continuous supervisory readiness for PRA, FCA, and Internal Audit requests.
**Business Owner Enablement:** Provide hands-on training and guidance at each lifecycle stage. Define and measure completion, timeliness, and quality metrics. Follow through on overdue assessments and remediation, escalating constructively when necessary. Build capability across the bank through recurring feedback and process simplification.
**Data, Tooling & Automation:** Establish a single trusted source of third-party information with clear data ownership and quality controls. Own the third-party management platform and complete fitness-for-purpose assessments. Maintain a roadmap that automates intake, evidence collection, reminders, register maintenance, workflow, and reporting. Provide decision-quality management information to executives and the board.
**Requirements:**
- Senior third-party management, vendor management, or procurement leadership experience within a UK regulated financial services firm
- Working knowledge of PRA SS2/21 and SYSC 8 Outsourcing, demonstrated through practical application
- Track record of negotiating and contracting significant technology and outsourced service agreements
- Experience designing or materially improving supplier segmentation and materiality assessment approaches
- Evidence of driving adoption of processes across an organization without direct authority
- Experience leading a small team
- Metric-driven approach, defining what will be measured before designing the process
- Technical fluency and comfort with data tooling and workflow automation
