[EU] IT Outsourcing & Third Party Risk Manager

Responsibilities

• Support the implementation, maintenance and operation of Bybit's third-party risk management framework
• Oversee and monitor third-party services and vendors in accordance with regulatory requirements across Bybit EU's regulated entities in Austria
• Ensure agreements, SLAs, KPIs and other metrics are in place to manage third parties against regulatory requirements
• Review and analyse documentation, prepare reports, develop Management Information, and handle regulatory notifications
• Support assessment of new third-party services
• Continuously develop the third-party risk management framework including documentation, assessments, systems and tools
• Provide first and second line review and challenge of third parties, helping implement SLAs, KRIs and other monitoring mechanisms
• Maintain and update the third-party portfolio and registers in alignment with regulatory requirements (e.g. DORA)
• Ensure adherence to the full Third-Party Risk lifecycle — from identification and assessment through to monitoring and exit planning
• Support training for business partners on TPRM framework, policies, standards and processes
• Interact with internal stakeholders (Legal, Compliance, Data Protection, Technology) and external providers and the Austrian regulator

• Solid understanding of Third-Party Risk Management, with specific knowledge of DORA, EBA Outsourcing guidelines, and the Austrian banking act
• Hands-on experience operating third-party risk frameworks
• Experience managing third parties across the full lifecycle, including SLA development
• At least 3-5 year work experience in financial services with deep knowledge in banking regulation (first experience with DORA) and procurement/outsourcing area
• Fluent in German and English
• Strong stakeholder management and communication skills, with the ability to build credibility across internal and external audiences