About us
Join one of the UK’s fastest growing and award-winning banks.
We are a team of ambitious, passionate, hardworking, and committed people who have successfully created and launched one of the UK’s newest specialist property finance banks. As we embark on an exciting journey of growth, we are seeking exceptional new team members who possess both the ambition and drive to contribute to our vision. At GB Bank, we believe that career progression should not only be achievable but accelerated, enabling our employees to reach their potential in a supportive and dynamic atmosphere.
Our environment is fast-paced and collaborative, where your efforts are recognised, rewarded, and make a tangible impact. We take pride in fostering and open and inclusive culture that not only embraces change but also encourages continuous learning and professional development.
In this role, you will:
The Third-Party Resilience Analyst supports the day-to-day management of GB Bank’s third-party and supplier arrangements, helping to ensure suppliers are properly onboarded, assessed, monitored, evidenced and managed throughout their lifecycle.
This is a predominantly third-party role. The clear majority of time is expected to be spent on supplier records, tiering, due diligence, contracts, service reviews, relationship management, actions, remediation and MI. The role also supports the wider Operational Resilience framework where supplier arrangements underpin Important Business Services, business continuity, scenario testing, crisis response or regulatory evidence. That wider resilience support will be limited to areas where there is a supplier dependency, third-party disruption or evidence requirement, and should always link back to supplier oversight or the resilience of outsourced and third-party services.
Key areas of responsibility:
Supplier Records, Tiering & Documentation
Maintain accurate supplier records in RiskSmart and the supplier register, including contacts, service description, owner, criticality tier and regulatory overlay attributes.
Work with supplier owners to complete the Internal Assessment and prepare a draft criticality tier (1–4) and overlay attributes (outsourcing, Material Outsourcing, MTP, IBS support, customer data, ICT/DORA) for confirmation by the Head of Operational Resilience.
Keep supporting templates, checklists, trackers and guidance up to date, flagging where day-to-day practice and the documented procedure have drifted apart.
Onboarding & Due Diligence Support
Issue and chase due diligence questionnaires (DD1/DD2, cloud security, data protection, modern slavery, fourth-party checklist) and track completion to the due date.
Carry out first-pass review of supplier responses across financial stability, sanctions and screening, cyber and information security, data protection, business continuity and resilience, summarising the key points and flagging gaps for review.
Coordinate input from Procurement, Legal, Risk, Compliance, InfoSec, Technology, Financial Crime and Operations, and keep the onboarding checklist and evidence pack complete.
Contracts, Renewals & Commercial Administration
Check contracts against the Bank’s clause checklist and flag missing protections (audit and regulator access, sub-outsourcing, resilience and BC obligations, incident notification, exit and transition) for review.
Ongoing Monitoring, Service Reviews & MI
Schedule supplier service reviews in line with tier, prepare the packs, capture notes and actions, and follow up afterwards.
Track performance against SLAs and KPIs, chase overdue reviews, assurance and capability assessments, and keep the action and remediation log current.
Produce regular MI on the supplier population, tiering, due diligence completion, overdue actions, incidents and emerging themes for onward reporting to ERC and ExCo.
Supplier Incidents & Communications Support
Act as an early point of contact for supplier-related issues: log, triage, gather the facts, escalate promptly and track through to resolution.
Supplier Dependency & Operational Resilience Support
Maintain the link between supplier records and the Bank’s Important Business Services, helping to evidence which third parties support IBS delivery and where changes, incidents or new suppliers may require the mapping to be refreshed.
Support supplier-related elements of business continuity, exit, workaround and disaster recovery planning, with particular focus on Tier 1 suppliers and services that support critical or important activities.
Help gather supplier evidence for scenario tests, BC testing, resilience exercises, incident reviews and self-assessment activity, ensuring supplier dependencies, vulnerabilities, lessons learned and actions are captured and followed through.
The Analyst supports the Bank’s third-party oversight and supplier evidence activity, and is expected to work in line with:
Full training and support will be provided on the regulatory framework — we are looking for interest and good judgement, not a ready-made expert.
A bit about you:
Essential
Confident with Excel (filtering, sorting, basic formulas and pivot tables) and comfortable with Word, PowerPoint and Teams.
Comfortable using everyday AI tools such as Microsoft Copilot to work more efficiently, while building real subject knowledge of your own. We expect AI to help you do the job well, not to do the thinking for you.
Either a degree or Higher Education Institute (HEI) qualification in a relevant subject (for example risk, business, finance, law, economics, data or security), or experience gained in a financial services environment such as operations, risk, compliance, procurement, customer service or change.
Some exposure to supplier or vendor management, procurement, third-party risk, operational risk or compliance — helpful, but training will be given.
Awareness of UK outsourcing, third-party risk and operational resilience expectations, including SS2/21, PS26/2, IBS, impact tolerances and scenario testing.
Practical experience of using AI tools for research, drafting, summarising or analysis, together with a clear understanding of where they fall short on accuracy and where confidentiality limits their use, particularly with supplier and customer information.
Interest in how third-party disruption can affect business continuity, crisis management and resilience exercising.
Key Role Attributes
What we are looking for in you:
Professional Qualifications
Willingness to work towards a relevant professional qualification focused on supplier management, risk or resilience, such as CIPS, IRM or ISO 22301 practitioner. BCI may also be relevant where development supports supplier continuity, exit or resilience oversight. Study support is available.
A commitment to continual professional development is preferred.
What we can offer you:
8% company pension contribution and 3% individual contribution (which you can opt to increase)
25 days holiday every year plus bank holidays on top
Private medical cover with BUPA - includes no excess + you can add family through salary sacrifice
Death in service at 4 x base salary with Aviva
Mental health support - through a helpline and counselling sessions
Enhanced maternity, paternity and adoption leave
What else do I need to know?
We are an equal opportunities employer and positively encourage applications from suitably qualified and eligible candidates, regardless of their age, sex, race, disability, sexual orientation, gender reassignment, religion or belief, marital/civil partnership status, or pregnancy and maternity.
At GB Bank, we value privacy and data protection rights. We have longstanding data protection culture and promote robust ethical standards in data management. Please read our Privacy Notice in relation to our recruitment activities before submitting your application to work with us.