Senior Manager - Operations Management (GSP - Vendor Risk Management)

Overview

Lead the third-party (vendor) risk management function for Marsh's Global Service Platform in Pune, covering strategy, risk assessment, policy, vendor lifecycle, monitoring and team leadership.

What you'll do

• Develop and refine the third-party risk management strategy aligned with organizational goals and regulatory requirements.
• Manage comprehensive risk assessments for high-risk vendors, including financial stability, cybersecurity, operational resilience, privacy/AI, compliance, and reputational risks.
• Establish, implement, and continuously improve policies, procedures, and standards for third-party risk management.
• Oversee the entire vendor lifecycle, from onboarding and due diligence to ongoing monitoring and offboarding.
• Design and oversee the implementation of key risk indicators (KRIs), dashboards, and reporting mechanisms for senior management and risk committees.
• Ensure all third-party activities comply with applicable laws, regulations, and industry standards (e.g., GDPR, HIPAA, DORA, SOC, etc.).
• Partner with legal, procurement, compliance, IT, and other risk management functions to evaluate vendor risks and develop mitigation strategies.
• Lead the third-party risk management team, providing mentorship, guidance, and performance management.
• Oversee the investigation and resolution of third-party risk incidents, including breach or compliance issues.
• Coordinate internal and external audits related to third-party risk, ensuring timely remediation of identified issues.
• Promote a risk-aware culture through training programs, workshops, and communication initiatives.
• Manage relationships with external vendors, risk assessment providers, and industry forums.

What you'll need

• Bachelor's degree with 8-10 years of experience.
• More than 5 years of experience in third-party/vendor risk management, compliance, or related fields.
• Deep understanding of regulatory frameworks, industry standards, and best practices related to third-party risk.
• Proven experience managing complex vendor portfolios, including high-risk or strategic vendors.
• Strong knowledge of cybersecurity, data privacy, operational resilience, and contractual risk mitigation.
• Demonstrated ability to develop and implement risk management frameworks and policies.
• Excellent leadership, strategic thinking, and stakeholder management skills.
• Strong analytical, problem-solving, and decision-making capabilities.

Nice to have

• Master's degree.
• Professional certifications such as Certified Third Party Risk Professional (CTPRP), Certified Risk Management Professional (CRMP), Certified Information Systems Security Professional (CISSP), or equivalent.
• Experience in highly regulated industries such as financial services, insurance, or technology.
• Familiarity with third-party risk management tools and platforms.
• Understanding of procurement functions such as sourcing, contracting, vendor operations and buyer functions.
• Ability to influence organizational culture and promote risk awareness.
• Strong communication skills, capable of presenting complex risk issues to executive leadership.

Details

• Location: Pune, India (Panchshil office).
• Hybrid work: all colleagues are expected to be in the local office or working onsite with clients at least three days per week, with one weekly anchor day for the full team.