Role OverviewThis is a hands-on, delivery-focused role supporting the implementation and ongoing operation of the Third Party Risk Management (TPRM) framework. The role involves direct engagement with external vendors, progressing data protection agreements and assessments, maintaining trackers and metrics, and supporting adhoc operational and process-related activities in a fast-evolving environment.Key ResponsibilitiesAct as the primary point of contact for assigned third-party vendorsEngage with vendors via email and calls to progress outstanding actions and obtain required documentationSupport the roll out, execution, and tracking of Data Processing Agreements (DPAs)Conduct third-party data protection compliance reviews, including Technical and Organisational Measures (TOMs) assessmentsReview vendor responses, identify risks or gaps, and support remediation activitiesMaintain accurate third-party records using SharePoint-based trackersProduce regular status updates and metrics for internal and client stakeholdersSupport reconciliation and validation of vendor information across multiple sourcesPerform vendor research to confirm organisational details and appropriate points of contactSupport the development, refinement, and maintenance of third-party risk and data privacy processes and templatesWork closely with internal stakeholders to align priorities, escalate issues, and resolve queriesSkills & Experience RequiredHands-on experience in Third Party Risk Management, Data Protection, Risk & Compliance, or similar operational rolesStrong understanding of GDPR, particularly obligations relating to third-party processingExperience conducting third-party compliance and TOMs assessmentsExperience engaging directly with external vendors, including follow-ups and callsStrong organisational skills with the ability to manage multiple third parties concurrentlyExperience using SharePoint or similar tools for tracking and document managementComfortable producing metrics, trackers, and status reportingStrong written and verbal communication skillsAbility to work effectively with incomplete, evolving, or inconsistent informationDesired Skills and Experiencedata protection|data privacy|GDPR|communication|consultant|third party risk management|TPRM