Senior Associate, Third Party Risk Management

Your mission

You will be part of the Third-Party Risk Management team. You support in implementing, maintaining and operating Bitpanda’s third-party risk management strategy and framework. As part of your remit, you will interact with various stakeholders within the Bitpanda Group and externally, for Bitpanda’s regulated German entity.

You will support and monitor third party risk in accordance with the regulatory requirements across multiple regulated entities within the Bitpanda Group. This will include tasks around agreements, SLA's, KRIs, KPI’s and other metrics to ensure we manage third-parties against the respective regulatory requirements. The role will also include reviewing and analysing documentation, preparation of reports, and providing support on the assessment of new third party services.

The role will report to the VP Risk & Compliance and will be part of the Third Party Risk Management Team. You will work closely with internal stakeholders such as Risk, Legal, Compliance, Data Protection, and Technology.  

What you’ll do

• Support in the development of Bitpanda’s third-party risk management framework including, documentation, assessments, systems and tools implemented across the Group. 
• Support the maintenance and regular updating of the third-party profile and related registers, ensuring alignment with applicable regulatory requirements (e.g. EBA, DORA).
• Assist in the execution of the Third-Party Risk Management lifecycle, including third-party identification, risk assessments, ongoing monitoring, and support for exit planning activities.
• Contribute to the preparation and delivery of training and awareness sessions for internal stakeholders, helping to explain the Third-Party Risk Management framework, policies, standards, processes, and procedures, as well as their interaction with related processes.

Who you are

• You have a strong interest in Third Party Risk Management and operational resilience, with foundational knowledge of relevant regulatory frameworks such as DORA, MaRisk, EBA Outsourcing, PRA SS2/21, or equivalent regulations.
• You’ve gained initial exposure to risk management, outsourcing, compliance, or operational risk through your studies or work, and are keen to grow your expertise in this area.
• You’re familiar with the basics of Third Party Risk Management frameworks and are motivated to learn how to apply them across the third-party lifecycle, from onboarding and risk assessment to ongoing monitoring and exit.
• You enjoy working with different stakeholders and can communicate clearly and confidently in both German and English, building trust through a collaborative and pragmatic approach.
• You’re detail-oriented, eager to learn, and comfortable working in a fast-paced, regulated environment where priorities evolve and collaboration is key.