TPRM SME - Tactical Remedation

Industry: banking

Work model: full-time, hybrid - ideally 6 days/month on-site from Krakow, but we’re flexible in this matter

Project language: English

Business trips: n/a

Project length: 12 months contracts + prolongations.

Start: ASAP

Assignment type: B2B

The Subject Matter Expert will support tactical remediation efforts designed to maintain cyber risk within tolerance and oversee the embedding of the Financial Crime/Internal Fraud prevention process. The role will coordinate activity across stakeholders, drive timely completion of actions and help ensure that remediation outcomes are sustainable.

Key responsibilities

●       Support the planning and delivery of tactical remediation activities.

●       Help maintain relevant risk exposure within agreed tolerance.

●       Coordinate activities and deliverables across business, risk, procurement, technology, compliance and control stakeholders.

●       Track actions, dependencies, risks, issues and decisions.

●       Support the embedding of the new process into relevant business and control activities.

●       Assess the effectiveness and sustainability of remediation actions.

●       Identify gaps in processes, controls, ownership or governance.

●       Facilitate workshops and stakeholder discussions.

●       Prepare status updates, options papers and decision materials.

●       Follow up proactively to ensure actions are completed on time.

●       Escalate delays, blockers and emerging risks through the appropriate governance channels.

●       Maintain clear records of decisions, evidence and remediation outcomes.

●       Support the transition of tactical solutions into sustainable business-as-usual arrangements where appropriate.

Experience and qualifications

●       4–5 years of relevant professional experience in third-party risk, procurement, supplier/vendor management, cyber risk, financial crime risk, internal fraud risk, operational risk, control remediation or related change delivery.

●       Experience supporting third-party risk management engagements is preferred.

●       Basic to intermediate understanding of cyber risk.

●       Basic to intermediate understanding of financial crime and internal fraud risk.

●       Experience coordinating remediation activities across multiple stakeholders.

●       Experience working in a regulated, risk-controlled or governance-focused environment.

●       Experience supporting process embedding, control implementation or operational change.

●       Experience in banking, financial services or another regulated industry would be advantageous.

●       Relevant qualifications in risk, compliance, procurement, audit, project management or a related discipline would be beneficial.

Key skills and behaviours

●       Strong critical-thinking and structured problem-solving capability.

●       Strong analytical skills and attention to detail.

●       High level of proactivity and independent judgement.

●       Ability to coordinate contributions from diverse stakeholder groups.

●       Strong follow-up and delivery discipline, with a focus on getting actions completed promptly.

●       Effective interpersonal, communication and negotiation skills.

●       Ability to manage competing priorities and work at pace.

●       An Agile mindset, with the ability to adapt and iterate quickly.

●       Strong stakeholder management skills and confidence in challenging constructively.

●       Ability to identify control weaknesses, risks and potential unintended consequences.

●       Ability to explain cyber, financial crime and internal fraud risks clearly to relevant audiences.

●       Broad knowledge of banking and financial services, supported by relevant functional expertise.

Indicative success measures

●       Tactical remediation actions are delivered within agreed timelines.

●       Risk exposure remains within the required tolerance.

●       Stakeholder responsibilities, dependencies and deadlines are clearly understood.

●       The new process is embedded consistently and supported by appropriate evidence.

●       Blockers and emerging risks are identified early and escalated appropriately.

●       Remediation outcomes are sustainable and supported by clear ownership and governance.