IS Service Owner For Third Party Risk Management (TPRM)

Your role and responsibilities

The Service Owner for Third Party Risk Management(TPRM), within IS SRC Advisory & Assessments organization is responsible for designing, implementing and maintaining the framework to deliver the services in scope in time, budget and in line with the customer's expectations. You will also be responsible for running due diligence/assessments to manage third party risk (IT Risk) of ABBs suppliers, risk arising from usage of desktop software used across ABB endpoints, infosec related risk arising from contractual negotiations (security clauses) and Data Privacy advisory. Additionally the role will also have responsibility for promoting IS security advisory capabilities for all areas which fall within the scope of TPRM service to stakeholders.

You will be mainly accountable for:

• Designing, implementing and maintaining the methodology to deliver the services in scope, on time, within budget, and in line with the customers expectations.
• Ensuring hands-on involvement in operations within the service area, responsible to create effort, time, and cost estimates for demand requests (projects, solutions, deployments, and handover to operational vendor), and ensuring that the service reaches its targets with the increase in performance year after year.
• Managing service performance, ensure compliance with internal and external standards, and drive continuous service improvement, including planning and implementing service enhancements.
• Acting as the primary point of contact for stakeholders and escalations, manage expectations, maintain third-party vendor relationships, and ensure alignment with business needs.
• Overseeing SLAs, OLAs, change management processes (including CAB), participate in internal reviews, and implement strategic service delivery plans in accordance with corporate guidelines.

Qualifications for the role :

• Bachelors or Masters in IT Discipline.
• 10 + years of relevant experience is required in which 3 years of experience is required in leadership role
• Should have experience in Systems Development, Service and Operation Management, Process improvement and optimization and Cloud solutions
• Must have exposure in Data Analytics Agile methodology, Project management and IT management.
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk & Information Systems Control (CRISC) or ISO 27001 LA or equivalent is required. Any other certifications in ITIL Foundation, CISSP, CISM, Certified in Risk and Information Systems Control (CRISC) is preferred.
• Should have good communication skills in English.