Third Party Risk Management Specialist

Key Responsibilities

• Propose improvement initiatives and adjustments to the TPRM program to reflect changes in overall third-party risk profile, evolving security standards, regulatory requirements, and operating environment
• Conduct reviews on existing TPRM-related policies and procedures to assess ongoing effectiveness and compliance with regulatory and legal requirements
• Serve as Subject Matter Expert (SME) in third-party risk, providing advisory and guidance to business and IT stakeholders on matters such as due diligence assessments, ongoing risk monitoring, service level agreements, and contractual clauses to meet regulatory requirements
• Advise on handling adverse developments, contractual breaches, and non-compliance issues
• Conduct reviews of both new and existing third-party arrangements, working alongside SMEs from BCM, IT Security, IT Governance, Legal, and other functions to provide effective challenge on risk assessments and vendor management processes
• Conduct TPRM Committee meetings, including setting agendas covering due diligence assessment approvals, monitoring and control activities, and status of remediation actions by business and IT stakeholders
• Track and report gaps, deviations, and adverse developments identified in third-party risk management processes
• Perform independent testing to ascertain effective implementation of TPRM processes and controls
• Support internal and external audit requirements relating to third-party risk management

Requirements

• Degree in Information Technology, Business Administration, or a related field
• Minimum 3-5 years of experience in vendor management, procurement, risk and compliance, business audit, or a related area within the financial industry

Skills and Knowledge

• Good knowledge and understanding of regulatory and legal requirements related to IT vendor management and contracts
• Strong risk mindset, with ability to execute tasks rigorously while adhering to best practices in a critical payment infrastructure environment
• Ability to independently engage and work with business and IT stakeholders to deliver TPRM objectives