AVP, Technology Third-Party Risk Management
- Posted a month ago
- Be among the first 10 applicants
Job Description
I'm currently partnering with a well-established financial institution to appoint an AVP, Technology Third-Party Risk Management professional as part of a regional team. This role suits someone who enjoys being hands-on while working closely with stakeholders across technology, cyber risk, and vendor governance, with exposure across multiple markets.
Responsibilities:
- Play a key role in managing third-party risk across the full vendor lifecycle, from onboarding through ongoing oversight to exit
- Evaluate vendor due diligence submissions, with particular depth in technology and cyber risk considerations
- Provide advisory support to business and contract owners, helping them navigate TPRM requirements and best practices
- Ensure third-party records, documentation, and evidence are well maintained and audit-ready
- Partner with regional stakeholders across governance and risk functions to ensure TPRM controls are applied consistently
- Support the enhancement and evolution of TPRM processes, including regional initiatives and improvement projects
Requirements:
- 6+ years experience within financial services, with 3 years hands-on exposure to Third-Party Risk Management
- Strong grounding in risk and control assessment, particularly within technology-related domains
- Comfortable operating as an individual contributor in a regional environment
- Clear, confident communicator able to engage effectively with a broad range of stakeholders
If this aligns with your background, feel free to reach out for a confidential discussion.
More Info
Key Skills
Vendor Governance
Third-Party Risk Management
Cyber Risk
Risk and Control Assessment
About Company
Skills:
MAS Technology Risk Management (TRM) Guidelines, Third Party Risk Management frameworks, Operational resilience, Concentration risk assessments, Outsourcing governance frameworks, ISO certifications, MAS Notice 658, MAS Guidelines on Outsourcing, Reviewing and challenging independent assurance reports and certifications, Technology and cybersecurity assessment, Resilience testing, Security Assessments, SOC reports, Recovery objectives
Skills:
security assurance , Identity And Access Management, Information Security, Data Protection, Iso 27001, It Audit, Threat Modelling, Cloud Transformation, NIST CSF, Control Frameworks, operational controls, NIST 800-53, Technology Risk Management, Governance Assessment Methodologies, MAS TRM Guidelines
Skills:
technology risk , Spotfire, Alteryx, Power Bi, Tableau, Data Analytics, Python, Application Controls, AI Governance, Cyber Risk
Skills:
Microsoft Office, Outsourcing governance, Vendor management, Risk management
Skills:
compliance implementation , Vulnerability Management, Penetration Testing, Technology Risk Management Guidelines, ISO27000 standard, Risk Assessment, Cyber Hygiene Notice, Monitoring and governance, NIST framework, Personal Data Protection Act, Enterprise security risk management