Senior Associate - Third Party Risk Management

Company Description

We’re Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.

We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.

Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.

If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.

With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.

Checkout.com is actively looking for a highly skilled and proactive Senior Associate, Third-Party Risk Management (TPRM) to join our growing global team.

In this role, you will be at the forefront of protecting our business by conducting thorough due diligence and risk assessments on our external suppliers

You will also work alongside a team of experienced TPRM Associates, reporting to the TPRM Manager, driving best practices, ensuring high-quality risk assessments, and spearheading strategic process improvements.

If you have a strong foundation in vendor risk, a deep understanding of information security, and a passion for continuous improvement in a fast-paced environment, we want to hear from you.

What You Will Be Doing

• Risk Assessments & Due Diligence: Conduct end-to-end third-party risk assessments, minimum due diligence, and control evaluations.

• Evidence Validation: Review and analyze vendor compliance documentation, including control reports, certifications and security policies to validate their cybersecurity and operational resilience postures.

• Gap Analysis & Remediation: Identify control gaps in vendor controls. Work directly with vendors to agree on appropriate remediation actions and track them to completion.

• Workflow & SLA Management: Manage a continuous pipeline of vendor assessments, ensuring that reviews are completed efficiently, accurately, and within agreed-upon service level expectations.

• Stakeholder Collaboration: Act as a key point of contact for internal business owners and Procurement, guiding them through the TPRM process and escalating complex risks to internal Subject Matter Experts (SMEs) when necessary.

• Process Improvement & AI Integration: Support the wider TPRM team in strategic initiatives, leveraging AI and automation tools to drive process improvements, execute system migrations, maintain data hygiene, and continuously enhance our risk management frameworks.

• Ad Hoc Initiatives: Take ownership of agile, ad hoc risk management projects as they arise, adapting quickly to business needs and delivering prompt, high-quality results.

About You

• Experience: 5+ years of proven experience in Third-Party Risk Management, IT Risk, IT Audit, or a closely related Information Security Governance role.

• Framework Knowledge: Strong working knowledge of global security and risk frameworks, including ISO standards and SOC reporting, alongside a strong foundation in Third-Party Risk Management (TPRM) methodologies, cybersecurity principles, data privacy regulations amongst others.

• Accountability & Time Management: Highly organized with a strong sense of ownership. You effectively shoulder responsibility for multiple concurrent workloads, manage your time seamlessly, and consistently deliver prompt results.

• Leadership Skills: A proactive self-starter with experience mentoring peers, managing complex workloads, and acting as an escalation point for junior team members.

• Communication: Excellent written and verbal communication skills. You excel at taking complex technical or compliance concepts and explaining them in plain, actionable language for business stakeholders.

• Problem Solver: Highly analytical with a track record of driving process standardization and adapting to evolving regulatory landscapes.

• AI & Technical Skills: Experience with, or a strong aptitude for, utilizing Artificial Intelligence (AI) and automation to optimize risk assessment workflows, streamline data analysis, and scale TPRM operations

• Work Environment: Ability to work independently and as part of a team, with flexibility to align working hours to support the UK time zone.

Additional Information

Bring all of you to work

We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.

Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.

We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.

It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.

Life at Checkout.com

We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.

Curious about what it’s like to be part of our team? Visit our Careers Page to learn more about our culture, open roles, and what drives us.

For a closer look at daily life at Checkout.com, follow us on LinkedIn and Instagram