Description

• Operationalize Third Party Risk Management framework for APAC (risk identification/ assessment/ monitoring/ reporting, policies, procedures, standards) and exercise oversight of all Third Party risk management activities.
• Design, determine and establish KRIs, implement risk control measures and best practices (e.g. Due Diligence for Third-Party Service Providers/Outsourcing arrangements) with Operational Resilience (i.e. BCM, Technology Risk and Operational Risk) in mind
• Drive timely completion of Third Party risk deliverables and resolution of key risk issues.
• Perform assessment of Third Party risk incidents, issues and trends, communicate technical concepts to non-technical audience and provide advisory as Subject Matter Expert (e.g. for new product applications, outsourcing of services and engagement of Third Party vendors and service providers).
• Reporting to senior management at risk management committees.
• Cultivate and promote a strong Third Party risk culture.

• Good knowledge of outsourcing/third party, technology and operational risk requirements and industry standards, such as MAS TPRM/TRM guidelines, ITIL, SAS, NIST, ISO27001/2

• Minimum 3 years experience in vendor/ third party, IT / Cloud outsourcing or operational risk management, preferably in banking or financial services.

• Certifications such as CTPRP, CTPRA, CISSP, CRISC, CRCM, as well as CISSP, CISA, CISM and CRISC would be advantageous.

• Good project management skills and experience a plus
• Ability to perform gap analysis of Third Party risk management policies and processes against new regulatory requirements and guidelines.
• Self-starter and a critical thinker.
• Proactive, resourceful and able to think and act strategically and tactically.
• Able to multi-task and work independently under tight timelines.
• Strong oral and written communication skills.
• Strong stakeholder and people management skills.
• Culturally sensitive and good leadership qualities.