Role Title:Technology Vendor Management Lead
Shift: Mid Shift
Set up: Hybrid - 3x office; 2x WFH
Industry: Financial Services / Banking
Focus: Third-Party Risk Management (TPRM) & Regulatory Compliance (DORA)
Job Summary
The Technology Vendor Management Lead is responsible for overseeing the end-to-end service provider lifecycle within a highly regulated financial environment. This role ensures strict compliance with global service provider management frameworks, specifically focusing on Third-Party Risk Management (TPRM) and the Digital Operational Resilience Act (DORA). You will collaborate with technology teams and business owners to enhance governance, monitoring, and performance assessment of critical technology partners.
Key Responsibilities
- Service Provider Lifecycle Management: Lead the selection, appointment, onboarding, and offboarding of technology service providers, ensuring all steps align with financial regulatory standards.
- DORA & TPRM Compliance: Enforce and monitor compliance with the Digital Operational Resilience Act (DORA) and internal TPRM frameworks. Ensure that all ICT-related third-party risks are identified, documented, and mitigated.
- Register of Information (ROI) Maintenance: Maintain a comprehensive and accurate Register of Information (ROI) regarding all third-party arrangements, ensuring it meets the stringent reporting requirements of financial regulators.
- Risk Assessment: Conduct rigorous annual and ad-hoc risk assessments. Evaluate service providers operational resilience, security posture, and financial stability to ensure they meet the company's risk appetite.
- Governance & Enforcements: Act as the primary authority for the global service provider management framework within the technology function, ensuring all internal stakeholders adhere to established policies.
- Quality Assurance & Spot Checks: Perform regular audits and spot checks on vendor management activities. Initiate and track corrective actions for any identified non-compliance or performance gaps.
- Performance Monitoring: Define and monitor KPIs and KRIs (Key Risk Indicators) for critical vendors. Ensure business owners are actively tracking service levels and operational health.
- Stakeholder Coordination: Serve as the bridge between internal technology teams, legal, risk/compliance departments, and external service providers to facilitate smooth operations and governance.
- Data Integrity: Ensure the completeness and accuracy of vendor data within management tools (e.g., Archer, ServiceNow, or proprietary ROI systems).
- Process Optimization: Continuously update and improve vendor management procedures and guidelines to adapt to evolving regulations like DORA.
Key Qualifications & Skills
- Education: Bachelor's degree in IT, Business, Finance, or a related field.
- TPRM Expertise: Proven experience in Third-Party Risk Management (TPRM) within the financial services sector.
- Regulatory Knowledge: Deep understanding of the Digital Operational Resilience Act (DORA) and its implications for technology vendor management.
- Industry Experience: Minimum of 5+ years in vendor management specifically within a Banking or Financial Services organization.
- Frameworks: Strong understanding of governance frameworks, risk assessment methodologies, and financial compliance requirements.
- Technical Tools: Familiarity with service provider management tools, ROI databases, and Excel (advanced level for data analysis).
- Methodologies: Experience with PMP and/or Scrum/Agile methodologies is highly preferred.
- Soft Skills: Exceptional negotiation, relationship management, and stakeholder influence skills.
Preferred Qualifications
- Experience working in a large-scale Outsourcing/Offshoring setup for a global bank.
- Familiarity with IT Service Management (ITSM) frameworks such as ITIL.
- Professional certifications in Risk Management or Vendor Management (e.g., CTPRP).