The opportunity

Responsible for identifying, assessing, and mitigating risks arising from third-party relationships to ensure the institution’s regulatory compliance, operational resilience, and security in a payments environment.

Day-to-day responsibilities

• Develop, implement, and maintain third-party risk management (TPRM) framework aligned with PSD2/PI license requirements.
• Conduct due diligence, risk assessments, and ongoing monitoring of all third-party vendors and service providers.
• Perform risk scoring, contract risk reviews, and exit/transition planning for changes in vendors.
• Manage onboarding and offboarding processes for third parties; ensure appropriate approvals and documentation.
• Track and report risk metrics, KRI/KPI dashboards, and escalate critical issues to senior management.
• Oversee vendor risk controls, including information security, data privacy, business continuity, incident response, and regulatory compliance.
• Coordinate with Compliance, Information Security, Legal, and Procurement to address risk findings and remediation plans.
• Conduct periodic audits, reviews, and scenario testing of TPRM controls.
• Stay updated on regulatory changes and industry best practices; influence policy updates.

Who are we looking for

We look for big thinkers. People who can drive positive change, step up and show what’s next – people with passion, can-do attitude and a hunger to learn and grow. In practice this means:

• Bachelor's or Master's degree in Risk Management, Business Administration, Information Technology, or a related field
• Minimum two years of experience in third party risk mgmt. or operational risk
• Basic DORA knowledge
• Knowledgeable in data protection and security linked to regulations in banking/finance
• Hands-on experience in lifecycle management of ICT risks, information classification and risk assessments of suppliers
• Experience from due-diligence & monitoring positions including collaboration with and claiming information/actions from internal/external stakeholders incl. drafting reports and presenting for local executives/committies
• Experience with risk management platforms like OneTrust or similar tools
• Personal traits: hands-on, initiative and self governing with a high sense of service, analytical, structured and communicative
• Excellent stakeholder management and collaboration skills
• Professional Swedish and English both oral and written

Perks & Benefits

• Health contribution 
• Health check – Every 2:nd year 
• Pension: BTP1 & BTP2 
• Private Health Care Insurance (Euro Accident) 
• Parental pay and 12 months pension during parental leave 
• Opportunity to hybrid working according to company standard 
• Benefit portal with many great offers, plus more