Senior Manager/Manager - Third-Party Risk Management (TPRM) Governance

Overview

Lead the strategic design, operationalization, and ongoing oversight of the enterprise-wide Third-Party Risk Management framework, identifying, assessing, monitoring, and mitigating risks across all vendors, suppliers, and partners.

What you'll do

• Establish governance mechanisms and the end-to-end design for formulating, executing, and enhancing TPRM control frameworks, policies, and standard operating procedures.
• Ensure enterprise-wide adoption of third-party risk methodologies, aligning with applicable regulatory requirements.
• Drive a data-driven, risk-based approach to third-party evaluation, exception identification, and reporting.
• Design, consolidate, and present executive TPRM dashboards, trend analyses, and exception reports to the Risk Management Committee, Board of Directors, and senior leadership.
• Perform inherent and residual risk assessments, monitoring SLA adherence, performance metrics, and control effectiveness across the vendor lifecycle.
• Lead and oversee continuous vendor risk evaluations across financial health, information security, operational resilience, legal, compliance, and reputational risk.
• Maintain and govern a centralized, risk-tiered vendor inventory categorizing third parties by service nature, data access, regulatory criticality, and concentration risk.
• Define periodic due diligence and monitoring frequencies aligned with organizational risk appetite and regulatory standards.
• Lead the ongoing monitoring strategy for critical third parties using SLA performance tracking, continuous financial health reviews, threat intelligence feeds, and regulatory sanction screening.
• Manage and orchestrate structured, periodic vendor risk questionnaire assessments and remediation programs as defined under the TPRM framework.
• Track vendor incidents, operational control failures, and risk events to drive remediation, while maintaining up-to-date policies, SOPs, risk registers, and governance reporting.

What you'll need

• 6+ years of domain experience in Third-Party Risk Management, including Outsourcing Risk, Vendor Evaluation, Operational Risk, or Risk Governance within BFSI, FinTech, or a regulated environment.
• Deep understanding of regulatory guidelines on Third-Party Governance standards.
• Demonstrated expertise in third-party due diligence, SLA governance, regulatory compliance, and audit support for key third parties.
• Proven capability to assess complex, multi-domain vendor risk scenarios across legal, financial, cyber, operational, and regulatory vectors.
• Strong expertise in risk scoring models, trend analysis, exception tracking, and executive dashboarding.
• Bachelor's or Master's degree in Risk Management, Finance, Commerce, Law, Information Security, or a related discipline.

Nice to have

• Professional certifications in Risk Management or Information Security (e.g., ISO 27001 Lead Auditor, CISA, CRISC, or CERA).

Details

• Employment type: Full-Time.
• Location: Noida, Uttar Pradesh.