TPRM - Subject Matter Expert — Tactical Remediation

Industry: banking

Work model: full-time, hybrid - ideally 6 days/month on-site from Krakow, but we’re flexible in this matter

Project language: English

Business trips: n/a

Project length: 12 months contracts + prolongations.

Start: ASAP

Assignment type: B2B

The Subject Matter Expert will support tactical remediation efforts designed to maintain cyber risk within tolerance and oversee the embedding of the Financial Crime/Internal Fraud prevention process. The role will coordinate activity across stakeholders, drive timely completion of actions and help ensure that remediation outcomes are sustainable.

Key responsibilities

● Support the planning and delivery of tactical remediation activities.

● Help maintain relevant risk exposure within agreed tolerance.

● Coordinate activities and deliverables across business, risk, procurement, technology, compliance and control stakeholders.

● Track actions, dependencies, risks, issues and decisions.

● Support the embedding of the new process into relevant business and control activities.

● Assess the effectiveness and sustainability of remediation actions.

● Identify gaps in processes, controls, ownership or governance.

● Facilitate workshops and stakeholder discussions.

● Prepare status updates, options papers and decision materials.

● Follow up proactively to ensure actions are completed on time.

● Escalate delays, blockers and emerging risks through the appropriate governance channels.

● Maintain clear records of decisions, evidence and remediation outcomes.

● Support the transition of tactical solutions into sustainable business-as-usual arrangements where appropriate.

Experience and qualifications

● 4–5 years of relevant professional experience in third-party risk, procurement, supplier/vendor management, cyber risk, financial crime risk, internal fraud risk, operational risk, control remediation or related change delivery.

● Experience supporting third-party risk management engagements is preferred.

● Basic to intermediate understanding of cyber risk.

● Basic to intermediate understanding of financial crime and internal fraud risk.

● Experience coordinating remediation activities across multiple stakeholders.

● Experience working in a regulated, risk-controlled or governance-focused environment.

● Experience supporting process embedding, control implementation or operational change.

● Experience in banking, financial services or another regulated industry would be advantageous.

● Relevant qualifications in risk, compliance, procurement, audit, project management or a related discipline would be beneficial.

Key skills and behaviours

● Strong critical-thinking and structured problem-solving capability.

● Strong analytical skills and attention to detail.

● High level of proactivity and independent judgement.

● Ability to coordinate contributions from diverse stakeholder groups.

● Strong follow-up and delivery discipline, with a focus on getting actions completed promptly.

● Effective interpersonal, communication and negotiation skills.

● Ability to manage competing priorities and work at pace.

● An Agile mindset, with the ability to adapt and iterate quickly.

● Strong stakeholder management skills and confidence in challenging constructively.

● Ability to identify control weaknesses, risks and potential unintended consequences.

● Ability to explain cyber, financial crime and internal fraud risks clearly to relevant audiences.

● Broad knowledge of banking and financial services, supported by relevant functional expertise.

Indicative success measures

● Tactical remediation actions are delivered within agreed timelines.

● Risk exposure remains within the required tolerance.

● Stakeholder responsibilities, dependencies and deadlines are clearly understood.

● The new process is embedded consistently and supported by appropriate evidence.

● Blockers and emerging risks are identified early and escalated appropriately.

● Remediation outcomes are sustainable and supported by clear ownership and governance.