This central, global team within the First Line of Defense will be comprised of TPM trained professionals with strong understanding of all risks and control expectations relevant for the execution of the TPM program. The team covers assessments across multiple risk domains including information security, privacy, physical security, financial health, resiliency, anti-bribery, and more. The team of 12 repots into a Director of third party risk.
Your way to impact
- Understand the role of third-party risk management within the overall procurement and onboarding process
- Take pride and ownership of work to complete deliverables accurately
- Ensure policy and regulatory compliance are achieved through appropriate procedures
- Engage with cross-functional teams to strategize, manage projects, and deliver on business objectives
- Strengthen the integration of risk activities into the procure to pay process to deliver a positive end-to-end experience for the business
- Drive process efficiencies, improved user experience, and system connectivity
- Identify and help remediate issues impacting the Third-Party Management program
Your day-to-day
- Support the end-to-end process for third-party lifecycle from onboarding to termination, including execution of third-party risk assessments and periodic reassessments
- Review inherent risk questionnaires for scope and appropriate risk based due diligence
- Identify risks or exceptions to policy through submitted control assessment questionnaires
- Review supporting documentation for third-party controls such as service organization control (SOC) reports, third-party policies, and other key artifacts
- Open control gaps and calculate residual risk from assessment results
- Create and act on risk monitoring processes using a risk-based approach from alerts, dashboards, and reports
- Proactively manage assignments and book of work with business partners
- Produce KPI and KRI reporting for management and present as needed
- Analyse data for inventory health, trends, issues, and communicate results and recommendations
- Help maintain third-party inventory accuracy through data validation and record updates
- Develop and maintain Standard Operating Procedures (SOPs) of new and evolving processes
- Engage and align with stakeholders to complete timely assessments of third-parties
- Perform user acceptance testing (UAT) for system changes
What do you need to bring
- 4+ years of risk assessment, risk and controls management, third-party relationship management or business analyst (with emphasis on risk) experience
- Excellent analytical, problem solving and decision-making ability
- Ariba / SAP or ServiceNow experience a plus
- Strong in data analysis and reporting skills (Excel – VLOOKUP, Pivots, Charts) a plus
- Comfortable working both independently and collaboratively in a virtual-first, global team
- Demonstrated leadership and project management experience
- Must navigate gray area, multitask, and manage competing priorities under demanding deadlines
- Embody an entrepreneurial spirit, intellectual curiosity, and a bias towards action
- Ability to make decisions quickly with strong attention to detail in a fast-paced and dynamic work environment
- Strong verbal, written, presentation (PowerPoint), and interpersonal communications skills
- skills with the ability to present technical details to a non-technical audience.
