Assistant Manager - Third-Party Risk Management

Position Overview

The Assistant Manager will play a key role in executing and advancing the organization's Third-Party Risk Management (TPRM) program. This position demands alignment with regulatory requirements and enhancement of enterprise-wide TPRM frameworks, enabling consistent risk governance across all stages of third-party engagements.

Key Responsibilities

• Implement and uphold the TPRM governance structure, ensuring frameworks and policies align with regulations such as DORA, FCA, PRA, ISO 27001, NIST, SOC, and GDPR.
• Manage the complete lifecycle of third-party relationships including onboarding, due diligence, risk tiering, ongoing monitoring, reassessments, and exit procedures.
• Enforce rigorous due diligence and resilience protocols for high-risk suppliers, incorporating DORA compliance and operational resilience criteria.
• Conduct comprehensive risk assessments for ICT third-party providers focusing on operational resilience, business continuity, disaster recovery, cybersecurity, and incident response.
• Support critical business service mapping to identify dependencies on key third parties and contribute to resilience testing, scenario planning, and evaluation of concentration risks.
• Review and authorize due diligence documentation such as DDQs, SOC reports, ISO certifications, penetration testing reports, business continuity plans, and financial stability assessments.
• Identify and address risk gaps, manage issue resolution, and monitor progress on remediation initiatives.
• Engage proactively with stakeholders by preparing dashboards and reports to communicate risk insights to senior leaders and risk governance bodies.
• Drive continuous improvements and automation in TPRM tools, workflows, and documentation templates.
• Facilitate the deployment or enhancement of TPRM software platforms including but not limited to Ariba, ServiceNow, OneTrust, Archer, and Decision Focus.