Manager, Third Party Risk

About Airwallex

Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 150,000 businesses worldwide – including Brex, Rippling, Navan, Qantas, SHEIN and many more – with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale.

Proudly founded in Melbourne, we have a team of over 1,700 of the brightest and most innovative people in tech across 26 offices around the globe. Valued at US$6.2 billion and backed by world-leading investors including Visa, Airtree, Blackbird, Sequoia, DST Global, Greenoaks, Salesforce Ventures, Lone Pine, and Square Peg, Airwallex is leading the charge in building the global payments and financial platform of the future. If you’re ready to do the most ambitious work of your career, join us.

Please note that the contract for this role will start in January or February 2026. Apply only if you are ready to begin at that time, thank you.

What You’ll Do

As a Manager, Third Party Risk based in Amsterdam, you will play a mission-critical role in overseeing the end-to-end lifecycle of third-party risk management (TPRM) across Airwallex. You will hold primary accountability for ensuring compliance with DORA, the EBA outsourcing guidelines, and local NL/UK outsourcing rules, while also contributing to the uplift and execution of Airwallex’s global TPRM framework. Working closely with Legal, Compliance, Information Security, Procurement, and business leaders worldwide, you will help embed a risk-based, automated, and scalable approach across onboarding, contract review, performance monitoring, and vendor exit—ensuring Airwallex strengthens operational resilience, regulatory compliance, and innovation globally.

Responsibilities

• Lead the full TPRM lifecycle—onboarding, due diligence, contract/SLA review, performance monitoring, and vendor exit—across EMEA, while contributing to global consistency and best practice.

• Conduct risk assessments to identify, evaluate, and mitigate regulatory, operational, financial, and reputational risks for suppliers across multiple regions.

• Ensure compliance with DORA, EBA outsourcing guidelines, and local NL/UK rules, while supporting global alignment of frameworks, policies, and the Group’s Register of Information for ICT providers.

• Monitor supplier performance, SLAs, and risk metrics; escalate issues and enforce remediation plans; ensure contracts include adequate security, audit, incident, exit, and recovery provisions.

• Partner with Legal, Compliance, Infosec, Procurement, and business owners globally to strengthen third-party and subcontractor governance.

• Support continuous enhancement of TPRM policies, automation, and reporting through platforms such as AuditBoard; maintain audit-ready documentation and test process resilience.

• Provide management, risk committees, and governance forums with actionable reporting on risk trends, remediation status, and emerging third-party risk themes—both regionally and globally.

Who You Are

Minimum qualifications

• 3–5 years’ experience in third-party risk, outsourcing risk, operational risk, or compliance/assurance within financial services, fintech, or other regulated environments.

• Demonstrated hands-on involvement in the full TPRM lifecycle (onboarding, due diligence, contract/SLA review, monitoring, and exit).

• Familiarity with, or direct experience applying, DORA, EBA outsourcing guidelines, and regulatory expectations for ICT/cloud providers in the EU.

• Strong understanding of vendor contract requirements (security, audit, incident reporting, exit strategy) and ability to drive contract remediation initiatives.

• Experience using TPRM automation/workflow platforms (e.g., AuditBoard, OneTrust) and producing data-driven risk reporting.

• Excellent communication and stakeholder management skills, with the ability to build credibility and influence across global teams.

Preferred qualifications

• Experience interfacing with regulators (DNB, FCA, EBA) or supporting regulatory audits/assessments.

• Knowledge of cloud, SaaS, and fourth-party/sub-outsourcing risks in financial services.

• Prior responsibility for managing resilience, performance, and due diligence of critical ICT and cloud vendors.

• Background in change management, process improvement, or further education in risk, compliance, or information security.

Equal