Job Title - Senior Third‑Party Risk Management (TPRM) Specialist – Regulatory & Operational Resilience
Location - Bristol, Perth or York (Hybrid working)
Contract Length – 6 to 9 months
Inside IR35
This is a great job for someone who is an experienced Business Analyst or Third‑Party Risk Management specialist with a strong background in risk domain process re‑engineering, regulatory alignment, and operating model design. You enjoy working in complex, regulated environments and are confident in translating regulatory obligations into practical, scalable business processes. This role will suit someone who thrives on stakeholder collaboration, shaping new ways of working, and leveraging technology, automation, and GenAI to drive better risk outcomes.
A bit about the job:
Aviva is implementing a new Third‑Party Risk Management (TPRM) platform to strengthen regulatory compliance and operational resilience across its UK, Ireland and Canada operations. This role exists to ensure that third‑party risk and outsourcing processes are re‑designed to meet evolving regulatory expectations while being embedded seamlessly into the new platform.
You will work closely with the Delivery Lead, Risk Domain leaders and regional user groups to design future‑state processes, capture business and data requirements, and help define the TPRM operating model. The role will focus on enabling regulatory compliance using platform capabilities, including workflow automation, reporting and GenAI‑enabled functionality.
Skills and experience we’re looking for:
* Proven experience as a Business Analyst or TPRM specialist delivering regulatory or risk transformation initiatives within financial services
* Strong knowledge and practical application of operational resilience, outsourcing and third‑party risk regulations, including:
* PRA SS1/21 (Operational Resilience)
* PRA SS2/21 (Outsourcing and Third‑Party Risk Management)
* PRA SS6/24 (Critical Third Parties)
* DORA (Digital Operational Resilience Act)
* EBA Outsourcing Guidelines
* EIOPA Cloud Outsourcing Guidelines
* Demonstrated experience in process re‑engineering, requirements elicitation, and operating model design
* Ability to translate regulatory requirements into clear processes, controls, data, and reporting requirements
* Strong stakeholder engagement skills, with experience working across Risk, Compliance, Technology, and Procurement teams
Desirable experience:
* Knowledge of FCA PS26/2 and PRA PS7/26 operational incident and third‑party reporting
* Familiarity with OSFI Guideline B‑10 and E‑21 (Canada)
* Awareness of PIPEDA and provincial privacy laws (e.g. Ontario PHIPA)
* Experience working with TPRM or GRC platforms, including automation or AI‑enabled capabilities
What We Offer
* Opportunity to play a key role in a major post‑acquisition integration initiative.
* Exposure to senior stakeholders and strategic decision‑making.
* Collaborative, supportive environment with strong emphasis on delivery excellence.
* Hybrid working and competitive benefits.
We’re inclusive and welcome everyone – we want applications from all backgrounds and experiences.
Excited but not sure you tick every box? Even if you don’t, we’d still encourage you to apply.
We also consider all forms of flexible working, including part‑time and job‑share options.
We flex locations, hours and working patterns to suit our customers, the business and you. Most of our people smart‑work, spending at least 50% of their time in an Aviva office each week.
We’d love you to apply online. If you need a different way to apply, or have questions, please contact me at