ChangeNet Solutions
TPRM Regulatory Consultant
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Title: TPRM Regulatory Consultant
We're looking for a TPRM Regulatory Consultant to support a Third-Party Risk Management project. We are seeking an experienced Regulatory Analyst with an Asset Management background to lead the discovery, scoping and assessment of intragroup arrangements as part of the implementation of the FCA/PRA Material Third-Party Reporting requirements. The work will support the creation of a complete and accurate intragroup register, linkage of intragroup arrangements to underlying third-party dependencies, remediation of identified data gaps and the establishment of sustainable governance and reporting processes.
This is a hands-on delivery role. The successful candidate will independently lead the analysis, engage business stakeholders and service owners, work through fragmented data and documentation, define the remediation approach and drive actions through to completion. The requirement is for direct experience of leading intragroup analysis, business engagement and remediation, alongside strong third-party risk management and regulatory delivery expertise. You will operate within a structured programme environment to drive delivery, ensure governance, and support senior stakeholder decision-making. You’ll also be critical to delivering the work stream outcomes. You’ll be assertive, collaborative and flexible, and will have a ‘hands on’ approach and ‘can do’ attitude.
Key Responsibilities
-
Lead intragroup discovery and scope definition
- Develop and execute a structured approach to identify potentially relevant intragroup arrangements across business functions and legal entities.
- Consolidate information from multiple sources, including transfer-pricing data, the service catalogue, CoSec records and existing TPRM data.
- Define clear inclusion and exclusion criteria for the regulatory population and determine which intragroup services are received by UK-regulated entities and rely on an external third party for delivery.
- Produce a documented, evidence-based inventory of arrangements for assessment and propose the prioritisation for review.
- Reconcile duplicate, incomplete or inconsistent records and identify gaps requiring further investigation.
-
Conduct regulatory and risk assessments
- Assess identified intragroup services against the agreed materiality, regulatory scope and prioritisation criteria.
- Analyse the relationship between each intragroup service and its underlying external third-party dependencies and apply the developing intragroup risk framework consistently to maintain a clear audit trail of assessment decisions.
- Apply agreed regulatory criteria consistently and escalate matters requiring interpretation or formal regulatory judgement to the relevant TPRM, Legal or Compliance SME.
- Identify missing contracts, ownership information, service details, data metrics and supporting evidence.
- Escalate ambiguous or blocked cases to the relevant TPRM, or CoSec teams.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
-
Define and manage the remediation approach
- Translate assessment findings into a practical, risk-based remediation plan, prioritising the MVP scope.
- Develop a remediation plan with timelines and owners, to enable progress tracking. Provide regular status and progress updates.
- Categorise issues and agree remediation actions with service owners and relevant control functions. Establish effective working relationships across business functions and legal entities.
- Create and maintain the remediation tracker, monitor progress and follow up actively on overdue or incomplete actions.
- Work with service owners via structured working sessions to complete remediation activities and challenge submissions where information or evidence is insufficient.
- Capture remediated data for all in-scope entities and confirm that remediated records meet agreed completeness, accuracy and evidence standards.
- Explain regulatory requirements in clear business language and translate them into specific information and remediation requests.
- Provide early visibility of barriers that could affect regulatory readiness or downstream technology delivery.
-
Lead the Solution Design and Operating Model
- Develop business requirements including the data set required to support the MTP and Intragroup register and associated regulatory reporting.
- Define and document the BAU operating model including impact assessment to define the change to processes, controls, technology, roles and responsibilities.
- Work with Technology, Business Sponsors and SMEs to ensure the solution meets the agreed regulatory and business requirements.
-
Manage delivery of the intragroup workstream
- Develop and maintain the detailed workstream plan including activities, owners, dependencies and milestones.
- Track risks, issues, assumptions, dependencies and decisions, leveraging the existing project templates.
- Escalate delivery barriers and provide evidence-based recommendations on scope and prioritisation
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Key Deliverables and Outputs
- Agreed intragroup discovery and assessment methodology, including confirmed regulatory scope.
- Completed assessments for the agreed population, including intragroup mapping to relevant external third-party dependencies.
- Prioritised remediation approach and plan with clear owners and tracked actions.
- Validated intragroup data set ready for migration into ServiceNow.
- Regular management information, status reporting and decision papers.
- Approved business and regulatory requirements.
- Documented BAU operating model with impact assessment, approved by Business Sponsors.
- Regulatory requirements and design recommendations incorporated into the agreed technology solution design.
The knowledge, experience and qualifications you need
Essential
- Demonstrable experience of third-party risk management, ideally including material third parties, outsourcing or intragroup arrangements.
- Experience leading regulatory scoping, impact assessment, remediation or data-quality work within financial services.
- Experience of engaging business stakeholders to identify, validate and remediate third party / intragroup arrangements.
- Strong understanding of TPRM operating models, governance, controls, service ownership and regulatory reporting.
- Experience working with fragmented data where no single source of truth exists.
- Proven ability to define and execute a remediation approach, working with multiple business stakeholders.
- Strong analytical skills, with the ability to reconcile information across legal entities, services, suppliers, contracts and data sources.
- Ability to produce concise governance reporting and communicate complex findings to senior stakeholders.
- Strong delivery focus, judgement and willingness to work directly with detailed data and documentation.
Desirable
- Knowledge of FCA/PRA Material Third-Party Reporting requirements.
- Experience of FCA outsourcing, operational resilience or comparable third-party regulatory frameworks.
- Experience working with ServiceNow TPRM or another third-party risk management platform.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location