Manager - Vendor Risk Management

Our client is a global company in the fintech sector that is formed as a JV between two world leaders one, a global giant in the derivatives space and second, a world leader in financial research and analytics.

This company works in the area of derivatives and OTC products, which are the most complex parts of the financial market. The company is laying the foundations of a great culture and the space to build a great organization. Their current objective is to identify individuals who have high expertise, to join their existing team of experts who are spread across the world.

The Job

The TPRM manager will play an essential role for 3rd party risk assessments, overseeing vendor risk recertifications and continuously monitoring program for the vendors that are engaged across the Organization. TRPM manager would assess the risk to business and work with Domain expert to perform relevant assessments to verify if Vendor has right controls to mitigate the risk. Key deliverables will include :

• Risk assessments, recertifications, and continuous monitoring, you will participate in various projects.
• Responsible for managing operational delivery (against VRM framework and risk tolerance policy) through the outsourcing partner and inputs required from in-house expert functions.
• In-house vendor threat monitoring (VTM) owner and mitigate post-event vendor hits (i.e. Vendor Threat Monitoring)
• Review control-assessment reports and later manage remediation triage among internal expert functions following TPRM report generated by outsourcing provider.
• Decision maker optimizing total remediation license cost budget (i.e. which risks to remediate, which ones need further review & sign-off by internal subject-matter experts and which ones to accept)
• Oversee the vendor risk recertification process to maintain up-to-date vendor compliance evaluations as required
• Continuously monitor vendors engaged by the organization globally to identify and mitigate potential risks
• Collaborate with Cyber Risk/Information Security, Business Continuity, Procurement, Compliance and other Domain SMEs to ensure correct risk level is documented in the Vendor Risk Assessment results and also track the progress.
• Lead and support enhancement projects within Vendor Risk Management to meet various business and regulatory requirements.
• Lead one analyst to balance the TRPM work load and managing Ad-hoc projects such as client due-diligence audits.

Your Profile

• 8+ years of experience in understanding and managing the risk for IT and Cloud based vendors.
• Should have understanding on the roles and responsibilities of different risk functions like Third Party Risk Management, QA Function, IT Risk, Operational Risk, Internal Control, Internal audit, Privacy and Compliance etc.
• Collaborate with Cyber Risk/Information Security, Business Continuity, Procurement, Compliance and other Domain SMEs to ensure correct risk level is documented in the Vendor Risk Assessment results.
• Lead and support enhancement projects within Vendor Risk Management to meet various business and regulatory requirements.
• Open to work in UK Shift.