Project Manager - Third-Party Registers and Incident Reporting

G MASS are supporting a new UK regulatory initiative focused on PRA/FCA third-party registers and incident reporting, emerging from the current consultation phase. The programme takes key components of DORA and applies them within a UK regulatory context, requiring strong Operational Resilience expertise and hands-on experience with third-party risk and register implementation.

This role will operate at the intersection of programme delivery and detailed regulatory analysis. It is suited to an experienced PM/BA who can work independently, shape delivery as policy clarity evolves, and provide structure in an environment where regulatory expectations are still being finalised.

The consultant will report into senior delivery leadership and work closely with directors and analysts within the programme. The role offers strong visibility across Operational Resilience, Risk, Compliance, and Technology teams, and will evolve as regulatory alignment between the PRA and FCA becomes clearer during 2026.

Responsibilities:

• Support the delivery of a new PRA/FCA regulatory initiative covering third-party registers and incident reporting
• Interpret consultation papers and evolving policy statements, translating regulatory intent into clear delivery artefacts
• Lead or support the collation of registered third-party information, aligned to DORA-style requirements
• Define and maintain registers, controls, and supporting documentation required for regulatory compliance
• Work closely with Operational Resilience, Risk, and Technology stakeholders to align implementation approaches
• Engage with internal stakeholders to manage dependencies, risks, and regulatory uncertainty as policy develops

Requirements

• Strong experience delivering Operational Resilience initiatives within financial services
• Hands-on DORA implementation experience, particularly around third-party registers and incident reporting
• Experience collating, structuring, and validating third-party and vendor information for regulatory purposes
• Ability to operate independently with minimal supervision, providing direction to less experienced analysts where needed
• Strong stakeholder management skills across Risk, Compliance, Technology, and Operations
• Comfortable working in regulatory environments where requirements are still evolving

Benefits

Length: 6 month contract

Start Date: Late February 2026 (subject to onboarding timelines)

Salary: Up to £110k (subject to experience)

Office: London (4 days per week on-site)