Outsourcing & Third Party Risk Manager

Building the Future of Open Finance Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. The team Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. As the global crypto market transforms under the Markets in Crypto-Assets Regulation (MiCAR) and many more regulatory frameworks, Kraken is building the blueprint for how a global exchange scales compliantly — while unlocking new growth across products, markets, and partnerships. The opportunity We are seeking an Outsourcing and Third Party Risk Manager to help steer that evolution — a commercial, strategic operator who can connect regulatory compliance with business opportunity. The Outsourcing and Third Party Risk Manager will support the effective oversight of outsourced services and third party risk in support of regulatory initiatives across the organisation. The role will coordinate third-party governance, risk assessments, performance monitoring and remediation, while working closely with Operations, Risk, Group Vendor Management, Compliance, Legal and business teams to ensure outsourcing arrangements remain resilient, well controlled and aligned with regulatory expectations and business priorities. Outsourcing & Third Party Risk Management - Oversee, advise and support all parties in the performance of all ongoing monitoring and periodic reviews of Outsourcing arrangements to include Third Party engagements - Measure performance of outsourced service providers to agreed SLA, key performance indicators and track on a regular basis and maintain records of these outsourcing oversight activities - Ensure accurate and timely assessment reports, trend analysis and feedback is provided to the Compliance and Risk Committee - Support regulatory deliverables, submissions, and communications with supervisors - Support the preparation of Board and Committee materials, including timely assessment reports, trend analysis and feedback, operational MI, and outsourcing oversight reporting - Assist in ensuring third-party risk management and outsourcing policies and procedures adhere to regulatory standards. Responsible for keeping up to date with changing regulations in relevant jurisdictions and application of knowledge to the role. Coordinate with Compliance, Operational Risk and internal /external audit to meet group and regulatory requirements - Act as point of contact for outsourcing related queries and provide guidance and training in line with third party management and outsourcing policy, procedures and regulations to the internal clients and stakeholders - Assess proposed new engagements and maintain records of these outsourcing oversight activities, and participate in client due diligence, RFPs or external third-party provider assessments as required - Identify and mitigate risks associated with strategic suppliers while monitoring vendor performance against negotiated Service Level Agreements (SLAs) and Master Service Agreements (MSAs) - Champion continuous improvement efforts by identifying process enhancement opportunities, implementing automation solutions, testing new workflows, and driving operational efficiencies - Identify, deploy, and leverage generative AI tools (e.g., ChatGPT, Claude) to streamline workflows, automate operational processes, and enhance efficiency, decision-making, and scalability across regulatory and commercial initiatives Cross-Functional Influence - Act as the central point of integration between regulatory strategy and operational execution - Lead cross-functional working groups, manage dependencies, and drive visibility across leadership on progress, risks, and opportunities - Support commercial and product teams in understanding MiCAR constraints and opportunities when designing new offerings - Deliver strategic updates and performance insights to executives and the board, linking regulatory progress to market positioning - Partner closely with Group’s Vendor Management organization and participate maturing the Vendor Management Program What you bring - Experience supporting or assessing operational control environments relating to technology governance, regulatory compliance, or operational resilience - Understanding of EU regulatory frameworks (EMRs, MiCAR, MiFID II, PSD2, AMLD5/6, DORA, etc.) - Deep experience in outsourcing oversight, vendor performance, and regulatory submissions - Exceptional problem-solving, analytical, and executive communication skills - Commercially astute — able to connect regulatory compliance with business growth and customer trust - Ability to operate with a consulting mindset: structured, analytical, and action-oriented - You thrive in ambiguity and moves quickly from concept to execution - Collaborative, low-ego, and able to influence senior stakeholders - Passionate about crypto, innovation, and responsible scaling in regulated environment