Lead, Third Party Governance, Reporting & Performance (India, Poland)

Job description

**#body.unify div.unify-button-container .unify-apply-now:** focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply- **Requisition Number:** 58842 **Job Location:** Bangalore, IND \| Warszawa, POL **Global Grade:** Band 5 **Work Type:** Hybrid Working **Employment Type:** Permanent **Posting Start Date:** 28/07/2026 **Posting End Date:** 28/08/2026 : Job Summary This role could be based in India or Poland. When you start the application process you will be presented with a drop-down menu showing all countries, please ensure that you only select a country where the role is based The Client \& Third Party Security (CTPS) team is an integral part of the Bank's Group Threat Management (GTM) within the Information \& Cyber Security (ICS) division. Our mandate focuses on protecting the Bank against emerging cyber threats through deep external ecosystem insights, including third-party vendors, partners, and clients. CTPS is pivotal in managing third-party cyber risk lifecycles --- from assessments, contractual control, continuous monitoring, incident investigation, to remediation. The Lead, Third Party Governance, Reporting \& Performance will spearhead a dedicated team ensuring the delivery of comprehensive operational performance oversight, management information reporting, and governance committee communications. This leadership role demands precision in articulating performance metrics, key control status, risk assessments, and escalation of critical findings to promote informed risk-based decision making. You will oversee timely and consistent reporting across global business units and governance structures, guaranteeing transparent visibility of third party cyber risks, operational performance compared to agreed standards, and actionable insights to inform stakeholders and drive continuous improvement. This role is positioned at the confluence of security, risk management, and operational excellence, offering a unique leadership opportunity to influence and enhance supply chain security at a global scale. Key Responsibilities Strategy * Transform CTPS' approach to governance, reporting and performance, ensuring it aligns to the Group's wider business strategy, risk appetite and third party security risk priorities. * Shape the future-state approach for operational performance management, KPI reporting, key control reporting and governance engagement across CTPS. * Drive the evolution of CTPS reporting from retrospective performance updates towards more forward-looking, insight-led management information that supports risk-based decision-making. * Contribute to strategic transformation initiatives, including improved metric governance, reporting automation, control reporting maturity and integration with centralised TPRM tooling and processes. * Identify opportunities to simplify, standardise and strengthen reporting across country, regional, business, function and Group governance forums. Business * Maintain awareness and understanding of the wider business, regulatory, operational and third party risk environment in which the Group operates. * Ensure senior stakeholders receive accurate, timely, action-oriented and business-relevant insight into CTPS operational performance, KPI trends, control effectiveness and residual risk exposure. * Support business and function stakeholders by clearly articulating how third party cyber security performance impacts risk acceptance, operational resilience, client outcomes and regulatory confidence. * Deliver high-quality reporting outputs that enable country, regional and Group committees to understand performance against thresholds, areas of deterioration and required management actions. * Balance competing reporting demands across businesses, functions, markets and governance forums while maintaining consistency, quality and accuracy of CTPS messaging. Processes * Responsible for overseeing the CTPS operational performance reporting process, including calculation, validation, quality assurance and submission of KPIs, KRIs, key controls and supporting commentary. * Ensure metric definitions, calculation methodologies, data sources, assumptions, exclusions and thresholds are documented, understood and applied consistently. * Supervise the production of governance reporting packs, dashboards, committee updates and management information across relevant CTPS processes. * Ensure performance issues, threshold breaches, overdue actions and deteriorating trends are identified, recorded, escalated and tracked through agreed processes. * Maintain repeatable, controlled and auditable reporting processes that support effective oversight under the Operational Risk Framework. * Partner with process owners to ensure operational reporting accurately reflects delivery performance, control outcomes, remediation progress and residual risk. People \& Talent * Lead through example by building a culture of accuracy, ownership, transparency, constructive challenge and continuous improvement across the Governance, Reporting \& Performance team. * Set clear expectations for reporting quality, timeliness, risk judgement, attention to detail and stakeholder management. * Ensure team members are appropriately trained and developed in data analysis, KPI calculation, control reporting, governance writing, risk articulation and committee engagement. * Provide effective supervision, coaching and quality assurance to ensure critical reporting activities are performed to the required standard. * Employ, engage and retain high-quality people, with appropriate succession planning for key reporting, governance and performance management roles. * Review team structure, capacity plans and workload allocation to ensure the team can meet increasing reporting demand and governance commitments. *