Manager Third Party Risk Management

As Manager - Third Party Risk Management, the role is responsible for managing the day-to-day operation of the TPRM framework and supporting the Head of TPRM in its ongoing enhancement, implementation, and effectiveness monitoring. maintaining assessment records, tracking issues and remediation actions, and supporting reporting, governance, and regulatory readiness. The following are the key roles and responsibilities:

• Manage and coordinate third-party risk assessments, including vendor classification, inherent risk assessments, due diligence reviews, control assessments, cyber/security reviews, and periodic reassessments in accordance with the Bank's TPRM framework, policies, and established review schedules.
• Coordinate the identification, assessment, monitoring, and ongoing oversight of outsourcing arrangements and critical service providers, ensuring compliance with internal policies, contractual requirements, and applicable regulatory expectations.
• Manage the daily operational activities of the TPRM function, including assessment planning, stakeholder follow-up, SLA monitoring, documentation, and timely closure of assigned activities.
• Maintain and oversee the centralized inventory of third parties, outsourcing arrangements, risk classifications, assessment status, review schedules, and remediation actions to support effective risk oversight, governance reporting, and regulatory requirements.
• Maintain oversight of outsourcing arrangements and critical service providers throughout their lifecycle, ensuring compliance with applicable regulatory requirements, contractual obligations, internal policies, and governance standards. Escalate material outsourcing risks and significant control concerns to management and relevant governance forums as appropriate.
• Track identified risks, control gaps, open issues, and remediation actions; coordinate with business units, vendors, and control functions to ensure timely resolution and appropriate escalation of overdue or material items.
• Support the Head of TPRM in implementing, maintaining, and enhancing the TPRM framework, policies, procedures, assessment templates, review calendars, and operating processes.
• Prepare dashboards, KPI/KRI reporting, risk summaries, committee packs, management updates, and governance reporting materials. Present TPRM risk trends, key findings, remediation status, and emerging third-party risks to management committees and governance forums as required.
• Liaise with business units, Procurement, Information Security, Legal, Compliance, Data Privacy, Business Continuity, vendors, and other subject matter experts to support consistent and timely TPRM assessment outcomes.
• Maintain complete assessment records, evidence repositories, risk registers, and supporting documentation. Coordinate responses to internal audit reviews, external audits, regulatory examinations, supervisory requests, and management information requests relating to third-party risk management.
• Identify opportunities to improve assessment efficiency, reporting quality, operating processes, data quality, and stakeholder awareness, and support implementation of approved enhancements.
• Maintain and oversee the centralized inventory/register of third parties, outsourcing arrangements, risk classifications, assessment status, review schedules, and remediation actions to support effective risk oversight and regulatory reporting.
• Support the assessment and ongoing oversight of outsourcing arrangements, including identification of material outsourcing relationships, compliance with regulatory requirements, and monitoring of associated risks.
• Prepare and present TPRM updates, risk trends, key findings, and remediation status to management committees and governance forums as required.
• Escalate material third-party risks, control deficiencies, overdue remediation actions, and emerging vendor risk concerns to management and relevant governance forums.

Generic Accountabilities:

Key Performance Indicators

• Completion of TPRM assessments, reviews, and stakeholder follow-ups within agreed timelines and service standards.
• Timely identification, documentation, escalation, and follow-up of third-party risks, control gaps, and remediation actions.
• Accuracy and completeness of TPRM assessment records, review trackers, dashboards, and management reporting inputs.
• Effective support to the Head of TPRM in implementing and maintaining the TPRM framework, procedures, and templates
• Completion of periodic reviews for applicable third parties in accordance with approved risk tiering, review frequency, and assessment protocols.
• Timely preparation of KPI/KRI inputs, risk summaries, committee updates, and management reporting materials.
• Quality of coordination with business units, control functions, vendors, and subject matter experts to support consistent TPRM outcomes.
• Coordinate responses to regulatory reviews, supervisory requests, internal audits, and external audits relating to third-party and outsourcing risk management.