Third Party Risk Manager

Since we opened our doors in 2009, the world of commerce has evolved immensely, and so has Square. After enabling anyone to take payments and never miss a sale, we saw sellers stymied by disparate, outmoded products and tools that wouldn't work together.

So we expanded into software and started building integrated, omnichannel solutions – to help sellers sell online, manage inventory, offer buy now, pay later functionality, book appointments, engage loyal buyers, and hire and pay staff. Across it all, we've embedded financial services tools at the point of sale, so merchants can access a business loan and manage their cash flow in one place. Afterpay furthers our goal to provide omnichannel tools that unlock meaningful value and growth, enabling sellers to capture the next generation shopper, increase order sizes, and compete at a larger scale.

Today, we are a partner to sellers of all sizes – large, enterprise-scale businesses with complex operations, sellers just starting, as well as merchants who began selling with Square and have grown larger over time. As our sellers grow, so do our solutions. There is a massive opportunity in front of us. We're building a significant, meaningful, and lasting business, and we are helping sellers worldwide do the same.

The Role

Join the Compliance team as the Third Party & Outsourcing Risk Manager who is responsible for the daily oversight and coordination of services received from intragroup services, and holistic oversight of all external TPSP/OSPs. You will be based in the London office but will have the option to work remotely (from anywhere in the UK), and report to the CCO, Europe.

You Will

The Third-Party & Outsourcing Risk Manager leads the development and implementation of the outsourcing risk program (policy, procedures and guidelines) in accordance with regulatory requirements, working closely with first line business stakeholders, risk, compliance and legal to ensure the requirements are met

• Producing relevant management information on program updates, outsourcing risks, regulatory changes and the outcomes from any initial and periodic due diligence, highlighting any risks or concerns identified as part of the process;
• Conduct an initial review of any potential outsourced arrangements (triggered through Thinksmart for external third parties) to determine whether the outsourcing and criticality assessment is required;
• Review potential outsourcing arrangements and changes to existing arrangements, supervising the completeness of Outsourcing Risk and Criticality Assessments, Due Diligence, and Outsourcing Contracts for all OSPs, before entering into an outsourcing arrangement, and periodically throughout the outsourcing relationship;
• Collaborate with risk subject matter experts to ensure the risk assessment and due diligence process is effective in identifying and mitigating risk with critical and non critical services
• Maintain the Outsourcing Register and review it annually to ensure it is accurate and up to date. Advise the OOC of any changes and present this to the OOC, RGC & Board on at least an annual basis
• Conduct periodic (at least annual) review of outsourcing policy, procedures, criticality assessment, risk assessment and due diligence process to ensure they are is still fit for purpose and in consideration of regulatory requirements
• Conduct adequate and risk-based monitoring of Outsourcing Arrangements with further oversight and challenge coming from 2LOD and 3LOD;
• Assess any proposed changes in the nature of any Outsourced Arrangements and where necessary, ensuring that all relevant outsourcing documentation has been updated and approvals received before the change being made;
• Ensure that BCM testing is completed on critical outsourcing arrangements on at least an annual basis;
• Develop the outsourcing program to ensure it continues to align with any new regulatory requirements
• Ensure the development and delivery of a risk-based outsourcing training programm in SIL;
• Ensure that Block group policies and procedures meet any obligations imposed on SIL in order to comply with any local regulatory legal and risk management requirements;
• Assess Block groups policies and procedures and ensure any obligations imposed on SIL comply with any local regulatory legal and risk management requirements, assisted by the Outsourcing recipient;
• Produce relevant management information on the performance and delivery of outsourced services including the reporting of any control issues, breaches or incidents, and providing this to SIL Outsourcing Oversight Committee;

You have

• 6+ years' experience within payments/e-money or other regulated financial services firm
• Experience working in outsourced service providers and vendor relationship management
• Relevant experience and in-depth knowledge of outsourcing regulations, especially EBA and Financial Conduct Authority outsourcing guidelines
• Self-starter with ability to work in a fast-paced environment

This role has been identified as a Controlled Function position by the Central Bank of Ireland. Any offer is subject to, and conditional upon, satisfactory completion of fitness and probity checks in accordance with the Central Bank Reform Act 2010.

We’re working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is a proud equal opportunity employer. We work hard to evaluate all employees and job applicants consistently, based solely on the core competencies required of the role at hand, and without regard to any legally protected class.We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we’re doing to build an inclusive workplace? Check out our Inclusion & Diversity page