Skip to main content

This job has expired

Head of Internal & External Supplier Risk, CCOR

Lloyds Banking Group
Edinburgh, United Kingdom
Closing date
24 Apr 2024

Job Details

End Date
Tuesday 23 April 2024

Salary Range
£0 - £0

We support flexible working - click here for more information on flexible working options

Flexible Working Options
Hybrid Working, Job Share

Job Description Summary
LOCATION(S): Edinburgh, Glasgow, Leeds, Halifax, Chester, Birmingham, Bristol or Cardiff
WORKING PATTERN: Our work style is hybrid, which involves spending two days per week, or 40% of our time at one of our Risk Hubs.

About this opportunity

We’re on an exciting journey and there couldn’t be a better time to join us. We’re putting in place a fresh operating model for non-financial risk management across the Group, empowering our people to take end-to-end accountability for managing the risks that they face!

This means we’re changing how we do risk management, creating a team of second line risk specialists, to provide support aligned to our first line risk owners and control owners to deliver great customer outcomes!

We’re looking for a Head of Internal & External Supplier Risk. Our external partnerships are essential to supporting the Group’s transformation. It's crucial that we understand the risks faced from our end to end supply chain as well as understanding those within the Group. In line with our purpose, our supply chain must be equally as focussed on delivering good consumer outcomes and maintaining operational resilience.

You’ll lead and develop a talented team and support robust risk management in alignment with the Group’s Enterprise Risk Management Framework. You’ll provide thought leadership, insight and oversight on behalf of the CRO in relation to internal and external service provision, including the end to end supply chain and lead the approach to implement risk policies, appetite, and control objectives that enable the delivery of customer, regulatory and business strategic outcomes.

Job Description

Key accountabilities:
  • Define risk taxonomy definitions for Supplier risk, as well as risk appetite scope, minimum standards, and principles, e.g. continuous monitoring and reporting of risk appetite metrics and associated key risk indicators.
  • Act as one of the Group’s Operational Risk leads and represent the organisation, building strong relationships with external partners, in particular regulators and other governing bodies.
  • Own design and implementation of Supplier Risk policies and appetite, including tolerances and thresholds. Lead and facilitate the understanding and adherence throughout the organisation, including ongoing management and continuous monitoring.
  • Responsible for the oversight and challenge of each Business Unit supplier risk profile, and plays a role in challenging and ensuring appropriate, proportional, and accurate reporting to governance committees.
  • Leads continuous review and enhancement of risk policies & appetite through the identification & assessment of emerging & growing risks, ensure policies and appetite reflect new opportunities or threats.
  • Design, embed, manage, and report on the Group’s Supplier Risk model that provides the structure for how Supplier risks aggregate together and a single LBG Supplier risk position is formed, including providing thematic periodic updates to risk committees on framework design and operation, and performance of Business Units and Control Functions.
  • Interprets new Supplier risk regulation accurately and adeptly. Forethinking the direction of travel and anticipating the impact of the proposed changes on the Group.
  • Develops effective, ongoing data-led Operational Risk control objectives to meet the needs or risk and control owners, control specialist teams, Audit and external regulators.
  • Supports control owners and specialists to implement control measures that are designed to achieve the control objectives and regularly monitors and validates outcomes.
  • Interprets new operational risk regulation and emerging technology opportunities and threats accurately and adeptly.

What you’ll need:
  • Evidence of being a strong technical expert in Internal and External Supplier Risk, with specific expertise of relevant regulation (e.g. SS2/21, SYSC 8, EBA outsourcing guidelines, DORA).
  • Understands best in class approaches to operational risk globally and recognised internally and externally as a subject matter authority and capable of influencing regulatory policy
  • Externally recognised ability to deliver third party risk management strategy for complex Financial Services organisations and transform policies and frameworks to deliver this vision.
  • Able to demonstrate depth to confidently provide credible advice and oversight to support the business and the mandate of the SMF 4.
  • Considered a deep subject matter authority internally and externally with a strong depth of understanding of the latest Operational Risk frameworks and technology being used across financial and non-financial services to enable them to lead a specialist risk centre of excellence.
  • Demonstrates expert knowledge of relevant laws, regulation, industry standards and established industry leading practices in technical field.
  • Experience of developing and owning group-level policy and setting risk-appetite, with expertise in continuous monitoring and reporting on group exposure.
  • Evidence of demonstrating good and timely decision making that keeps the organisation moving forward and skilfully balances difficult trade-offs with the ability to understand business strategy and opportunity risks.
  • Excellent leadership skills with evidence of coaching to go faster by demonstrating commitment to create an environment that builds teams with skills aligned to our Group Strategy and Purpose creating new and better ways for the organisation to change at pace.

And any experience of these would be really useful:
  • Excellent communication skills and the ability to influence at senior levels.
  • Inclusive working style that ensures everyone can be themselves in a safe environment.
  • Record of delivering results and an awareness of the importance of documentary evidence for key decisions.
  • Recognised internally and externally as a subject matter authority and capable of influencing regulatory policy.
  • Has examples to show how you have used your technical knowledge to ensure the business understands its obligations and demonstrate successful oversight and challenge to ensure adherence to Operational Risk Appetite, including, the ability to identify emerging risks, propose risk mitigating actions that are risk outcome focused, practical and commercially viable.

About working for us:

Our focus is to ensure we're inclusive every day, building an organisation that reflects modern society and celebrates diversity in all its forms. We want our people to feel that they belong and can be their best, regardless of background, identity or culture. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and a dedicated Working with Cancer initiative. And it’s why we especially welcome applications from under-represented groups. We’re disability confident. So if you’d like reasonable adjustments to be made to our recruitment processes, just let us know.

We also offer a wide-ranging benefits package, which includes:
  • A generous pension contribution of up to 15%
  • An annual performance-related bonus
  • Share schemes including free shares
  • Benefits you can adapt to your lifestyle, such as discounted shopping
  • 30 days’ holiday, with bank holidays on top
  • A range of wellbeing initiatives and generous parental leave policies

Want to do amazing work, that’s interesting and makes a difference to millions of people? Join our journey.

At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.

We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.

We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.


We’re creating an organisation that attracts, retains and develops the best talent in the industry, and one that openly embraces diversity too. But more than that – we want to be a great place to work. We invest in our people, offering the best training and coaching, and by encouraging them to contribute to our leading corporate and social responsibility practices. We offer flexible working hours and days, under our Work Options scheme. This means that you can have a challenging and rewarding career, and still have an ideal work/life balance.

Flexible working is at the heart of our strategy. We’re re-imagining where, when, and how our people work, with new approaches designed to meet the ever-changing needs of customers and colleagues. These include increasing our use of remote-working tools and technology, as well as placing less reliance on a 9-to-5 mindset. For many of our office-based colleagues, we work in hybrid ways which involves spending at least two days per week or 40% of their time at one of our office sites.

View our Top Employer profile

Company info

Get job alerts

Create a job alert and receive personalised job recommendations straight to your inbox.

Create alert