Third-Party Resilience Analyst

About us

Join one of the UK’s fastest growing and award-winning banks.

We are a team of ambitious, passionate, hardworking, and committed people who have successfully created and launched one of the UK’s newest specialist property finance banks. As we embark on an exciting journey of growth, we are seeking exceptional new team members who possess both the ambition and drive to contribute to our vision. At GB Bank, we believe that career progression should not only be achievable but accelerated, enabling our employees to reach their potential in a supportive and dynamic atmosphere.

Our environment is fast-paced and collaborative, where your efforts are recognised, rewarded, and make a tangible impact. We take pride in fostering and open and inclusive culture that not only embraces change but also encourages continuous learning and professional development.

In this role, you will:

The Third-Party Resilience Analyst supports the day-to-day management of GB Bank’s third-party and supplier arrangements, helping to ensure suppliers are properly onboarded, assessed, monitored, evidenced and managed throughout their lifecycle.

This is a predominantly third-party role. The clear majority of time is expected to be spent on supplier records, tiering, due diligence, contracts, service reviews, relationship management, actions, remediation and MI. The role also supports the wider Operational Resilience framework where supplier arrangements underpin Important Business Services, business continuity, scenario testing, crisis response or regulatory evidence. That wider resilience support will be limited to areas where there is a supplier dependency, third-party disruption or evidence requirement, and should always link back to supplier oversight or the resilience of outsourced and third-party services.

Key areas of responsibility:

Supplier Records, Tiering & Documentation

• Maintain accurate supplier records in RiskSmart and the supplier register, including contacts, service description, owner, criticality tier and regulatory overlay attributes.

• Work with supplier owners to complete the Internal Assessment and prepare a draft criticality tier (1–4) and overlay attributes (outsourcing, Material Outsourcing, MTP, IBS support, customer data, ICT/DORA) for confirmation by the Head of Operational Resilience.

• Keep supporting templates, checklists, trackers and guidance up to date, flagging where day-to-day practice and the documented procedure have drifted apart.

• Maintain version control, filing and the audit trail so supplier records are always review-ready.

Onboarding & Due Diligence Support

• Issue and chase due diligence questionnaires (DD1/DD2, cloud security, data protection, modern slavery, fourth-party checklist) and track completion to the due date.

• Carry out first-pass review of supplier responses across financial stability, sanctions and screening, cyber and information security, data protection, business continuity and resilience, summarising the key points and flagging gaps for review.

• Support DPIA screening: issue the supplier information request once the service owner has completed the Bank’s section, chase the return, and record the outcome against the supplier.

• Coordinate input from Procurement, Legal, Risk, Compliance, InfoSec, Technology, Financial Crime and Operations, and keep the onboarding checklist and evidence pack complete.

Contracts, Renewals & Commercial Administration

• Maintain the contracts tracker including key dates, notice periods, auto-renewal windows and obligations — and give supplier owners early warning of what is coming up.

• Check contracts against the Bank’s clause checklist and flag missing protections (audit and regulator access, sub-outsourcing, resilience and BC obligations, incident notification, exit and transition) for review.

• Support renewals, variations and offboarding by collating information and preparing the paperwork.

• Support invoice and cost checks, highlighting trends or anomalies worth a closer look.

Ongoing Monitoring, Service Reviews & MI

• Schedule supplier service reviews in line with tier, prepare the packs, capture notes and actions, and follow up afterwards.

• Track performance against SLAs and KPIs, chase overdue reviews, assurance and capability assessments, and keep the action and remediation log current.

• Produce regular MI on the supplier population, tiering, due diligence completion, overdue actions, incidents and emerging themes for onward reporting to ERC and ExCo.

• Escalate issues promptly and clearly rather than waiting for the next review.

Supplier Incidents & Communications Support

• Act as an early point of contact for supplier-related issues: log, triage, gather the facts, escalate promptly and track through to resolution.

• Keep supplier notification, escalation and out-of-hours contact details accurate and tested.

• Help maintain the contact lists, templates and channels used to communicate during third-party disruption.

Supplier Dependency & Operational Resilience Support

• Maintain the link between supplier records and the Bank’s Important Business Services, helping to evidence which third parties support IBS delivery and where changes, incidents or new suppliers may require the mapping to be refreshed.

• Support supplier-related elements of business continuity, exit, workaround and disaster recovery planning, with particular focus on Tier 1 suppliers and services that support critical or important activities.

• Help gather supplier evidence for scenario tests, BC testing, resilience exercises, incident reviews and self-assessment activity, ensuring supplier dependencies, vulnerabilities, lessons learned and actions are captured and followed through.

• Support wider operational resilience activity on an as-needed basis where there is a clear supplier dependency, third-party disruption or evidence requirement.

Regulatory Awareness

The Analyst supports the Bank’s third-party oversight and supplier evidence activity, and is expected to work in line with:

• FCA and PRA expectations for outsourcing and third-party risk management, including SYSC, SS2/21 and PS26/2.

• How third-party arrangements support the Bank’s Operational Resilience Policy, Important Business Services and impact tolerance evidence.

• Clear, consistent documentation of supplier oversight activity and audit-ready evidence.

• UK GDPR and the Data Protection Act 2018 when handling customer or colleague data.

• Identifying and escalating concentration or dependency concerns within the supplier portfolio.
  

Full training and support will be provided on the regulatory framework — we are looking for interest and good judgement, not a ready-made expert.

A bit about you:

Essential

• Strong organisation: comfortable juggling multiple suppliers and deadlines, chasing information and keeping trackers accurate without being prompted.

• High attention to detail — accurate records, spotting inconsistencies and gaps in information.

• Clear, confident and professional written and verbal communication; you will be emailing suppliers and colleagues at all levels.

• Confident with Excel (filtering, sorting, basic formulas and pivot tables) and comfortable with Word, PowerPoint and Teams.

• Curiosity and a genuine willingness to learn about supplier risk, third-party oversight, financial services regulation and how suppliers support operational resilience.

• Comfortable using everyday AI tools such as Microsoft Copilot to work more efficiently, while building real subject knowledge of your own. We expect AI to help you do the job well, not to do the thinking for you.

• Sound judgement and discretion when handling confidential or sensitive information.

• Either a degree or Higher Education Institute (HEI) qualification in a relevant subject (for example risk, business, finance, law, economics, data or security), or experience gained in a financial services environment such as operations, risk, compliance, procurement, customer service or change.

Desirable

• Some exposure to supplier or vendor management, procurement, third-party risk, operational risk or compliance — helpful, but training will be given.

• Awareness of UK outsourcing, third-party risk and operational resilience expectations, including SS2/21, PS26/2, IBS, impact tolerances and scenario testing.

• Experience of producing MI or reporting, or of using a GRC/risk tool (such as RiskSmart) or Power BI.

• Practical experience of using AI tools for research, drafting, summarising or analysis, together with a clear understanding of where they fall short on accuracy and where confidentiality limits their use, particularly with supplier and customer information.

• Interest in how third-party disruption can affect business continuity, crisis management and resilience exercising.
  

Key Role Attributes
What we are looking for in you:

• Organised, self-starting and comfortable owning a to-do list.

• Curious — happy to ask questions and challenge politely when something does not look right.

• Keen to learn the subject properly, take ownership of your work and keep developing. You will be able to explain and stand behind the work you produce, whatever tools you used to get there.

• Calm, professional and personable with suppliers and colleagues.

• A team player in a small function, willing to support wider resilience activity where it connects to suppliers or third-party dependency.

• Honest about what you do not yet know, and keen to learn.
  

Professional Qualifications

• A degree or Higher Education Institute (HEI) qualification in a relevant subject is favourable, but not essential.

• Willingness to work towards a relevant professional qualification focused on supplier management, risk or resilience, such as CIPS, IRM or ISO 22301 practitioner. BCI may also be relevant where development supports supplier continuity, exit or resilience oversight. Study support is available.

A commitment to continual professional development is preferred.

• 8% company pension contribution and 3% individual contribution (which you can opt to increase)

• 25 days holiday every year plus bank holidays on top

• Private medical cover with BUPA - includes no excess + you can add family through salary sacrifice

• Death in service at 4 x base salary with Aviva

• Mental health support - through a helpline and counselling sessions

• Enhanced maternity, paternity and adoption leave

What else do I need to know?

• Location: Mayfair, London (4+ days in the office)

• Salary: Competitive

• Hours: 35 Hours per week

We are an equal opportunities employer and positively encourage applications from suitably qualified and eligible candidates, regardless of their age, sex, race, disability, sexual orientation, gender reassignment, religion or belief, marital/civil partnership status, or pregnancy and maternity.

At GB Bank, we value privacy and data protection rights. We have longstanding data protection culture and promote robust ethical standards in data management. Please read our  Privacy Notice  in relation to our recruitment activities before submitting your application to work with us.