About the role
AI summarisedLead Third Party Risk Management (TPRM) role at a bank, responsible for overseeing the end-to-end risk management framework for third-party engagements, including risk assessments, due diligence, and ongoing monitoring. The role involves collaborating with business units and compliance teams to ensure regulatory adherence and mitigate operational, financial, and reputational risks.
BusinessFull-timeGeneral
Key Responsibilities
- Lead the Third Party Risk Management (TPRM) program, including risk assessments, due diligence, and ongoing monitoring of third-party vendors.
- Develop and maintain TPRM policies, procedures, and standards in alignment with regulatory requirements and industry best practices.
- Conduct risk assessments on new and existing third-party relationships, evaluating financial, operational, compliance, and cybersecurity risks.
- Collaborate with business units, procurement, legal, and information security to ensure consistent application of TPRM processes.
- Manage the third-party risk register and track remediation actions for identified risks.
- Prepare and present TPRM reports and dashboards to senior management and relevant committees.
- Support internal and external audits related to third-party risk management.
- Stay updated on regulatory changes and industry trends affecting third-party risk management.
Requirements
- Bachelor's degree in Business, Finance, Risk Management, or a related field.
- Minimum 8 years of experience in third-party risk management, vendor risk management, or operational risk within the banking or financial services industry.
- Strong knowledge of regulatory requirements related to third-party risk (e.g., MAS Guidelines, Basel, GDPR, SOX).
- Experience in conducting risk assessments, due diligence, and vendor audits.
- Excellent analytical and problem-solving skills with attention to detail.
- Strong stakeholder management and communication skills, both written and verbal.
- Ability to work independently and manage multiple priorities in a fast-paced environment.
- Professional certifications such as CISA, CISSP, CRISC, or CIA are preferred.
- Proficiency in risk management tools and Microsoft Office Suite.