Manager Third Party Risk Management

About the role

The Manager – Third Party Risk Management (TPRM) is responsible for the day‑to‑day operation of the bank’s TPRM framework and supports the Head of TPRM in enhancing, implementing and monitoring its effectiveness.

Key responsibilities

• Manage and coordinate third‑party risk assessments, including vendor classification, inherent risk assessments, due‑diligence reviews, control assessments, cyber/security reviews and periodic reassessments.
• Oversee the identification, assessment, monitoring and ongoing oversight of outsourcing arrangements and critical service providers to ensure compliance with internal policies, contractual requirements and regulatory expectations.
• Run daily operational activities of the TPRM function: assessment planning, stakeholder follow‑up, SLA monitoring, documentation and timely closure of activities.
• Maintain a centralized inventory of third parties, risk classifications, assessment status, review schedules and remediation actions for governance and regulatory reporting.
• Track risks, control gaps, open issues and remediation actions; coordinate with business units, vendors and control functions to ensure timely resolution.
• Support the Head of TPRM in maintaining and enhancing the TPRM framework, policies, procedures, templates and operating processes.
• Prepare dashboards, KPI/KRI reports, risk summaries, committee packs and governance materials; present risk trends and emerging third‑party risks to management committees.
• Liaise with Procurement, Information Security, Legal, Compliance, Data Privacy, Business Continuity and other stakeholders to ensure consistent assessment outcomes.
• Maintain complete assessment records, evidence repositories and risk registers; coordinate responses to internal and external audits, regulatory examinations and supervisory requests.

Required profile

• Proven experience in third‑party risk management within a financial institution or similar regulated environment.
• Strong understanding of regulatory expectations related to outsourcing and vendor risk.
• Ability to coordinate cross‑functional teams and manage multiple assessment cycles simultaneously.
• Excellent analytical skills for tracking risks, control gaps and remediation actions.

Required skills

What we offer

• Opportunity to shape and enhance a critical risk management function.
• Collaborative environment with senior stakeholders across the organization.