TPRM - Subject Matter Expert - Tactical Remediation

Industry: banking

Work model: full-time, hybrid - ideally 6 days/month on-site from Krakow, but we’re flexible in this matter

Project language: English

Business trips: n/a

Project length: 12 months contracts + prolongations.

Start: ASAP

Assignment type: B2B

The Subject Matter Expert will support tactical remediation efforts designed to maintain cyber risk within tolerance and oversee the embedding of the Financial Crime/Internal Fraud prevention process. The role will coordinate activity across stakeholders, drive timely completion of actions and help ensure that remediation outcomes are sustainable.

Key responsibilities

• Support the planning and delivery of tactical remediation activities.
• Help maintain relevant risk exposure within agreed tolerance.
• Coordinate activities and deliverables across business, risk, procurement, technology, compliance and control stakeholders.
• Track actions, dependencies, risks, issues and decisions.
• Support the embedding of the new process into relevant business and control activities.
• Assess the effectiveness and sustainability of remediation actions.
• Identify gaps in processes, controls, ownership or governance.
• Facilitate workshops and stakeholder discussions.
• Prepare status updates, options papers and decision materials.
• Follow up proactively to ensure actions are completed on time.
• Escalate delays, blockers and emerging risks through the appropriate governance channels.
• Maintain clear records of decisions, evidence and remediation outcomes.
• Support the transition of tactical solutions into sustainable business-as-usual arrangements where appropriate.

Experience and qualifications

• 4-5 years of relevant professional experience in third-party risk, procurement, supplier/vendor management, cyber risk, financial crime risk, internal fraud risk, operational risk, control remediation or related change delivery.
• Experience supporting third-party risk management engagements is preferred.
• Basic to intermediate understanding of cyber risk.
• Basic to intermediate understanding of financial crime and internal fraud risk.
• Experience coordinating remediation activities across multiple stakeholders.
• Experience working in a regulated, risk-controlled or governance-focused environment.
• Experience supporting process embedding, control implementation or operational change.
• Experience in banking, financial services or another regulated industry would be advantageous.
• Relevant qualifications in risk, compliance, procurement, audit, project management or a related discipline would be beneficial.

Key skills and behaviours

• Strong critical-thinking and structured problem-solving capability.
• Strong analytical skills and attention to detail.
• High level of proactivity and independent judgement.
• Ability to coordinate contributions from diverse stakeholder groups.
• Strong follow-up and delivery discipline, with a focus on getting actions completed promptly.
• Effective interpersonal, communication and negotiation skills.
• Ability to manage competing priorities and work at pace.
• An Agile mindset, with the ability to adapt and iterate quickly.
• Strong stakeholder management skills and confidence in challenging constructively.
• Ability to identify control weaknesses, risks and potential unintended consequences.
• Ability to explain cyber, financial crime and internal fraud risks clearly to relevant audiences.
• Broad knowledge of banking and financial services, supported by relevant functional expertise.

Indicative success measures

• Tactical remediation actions are delivered within agreed timelines.
• Risk exposure remains within the required tolerance.
• Stakeholder responsibilities, dependencies and deadlines are clearly understood.
• The new process is embedded consistently and supported by appropriate evidence.
• Blockers and emerging risks are identified early and escalated appropriately.
• Remediation outcomes are sustainable and supported by clear ownership and governance.