Overview
The TPRM Analyst supports the end-to-end Third-Party Risk Management lifecycle, including risk assessment, due diligence, ongoing monitoring and remediation tracking, and works with the TPRM 1B function and business stakeholders across Business Groups.
What you'll do
- Provide oversight of the TPRM Program across Business Groups (Asia, Corporate, Sun Life US and Sun Life Capital Management), validating third-party risk assessments and confirming that appropriate due diligence and ongoing management activities are performed.
- Act as a control gatekeeper, ensuring the TPRM Program operates in compliance with Sun Life and regulatory requirements.
- Serve as a subject matter expert on enterprise third-party governance, risk and management requirements.
- Support the business functions in day-to-day operational and control aspects of TPRM.
- Act as HK representative and liaise with Regional TPRM teams on TPRM initiatives, including collating and sharing the BUs practices and lessons learnt.
- Manage interaction with key stakeholders in local business units at different levels to understand TPRM requirements and develop approaches that meet relevant Corporate and regulatory requirements.
- Interface and partner with second line risk functions and subject matter experts on risk and policy compliance aspects of TPRM.
- Oversee and support troubleshooting and root-cause analysis of TPRM related issues, and timely escalation and resolution of issues with relevant stakeholders.
- Conduct risk assessments and due diligence reviews for new and existing third parties.
- Support and coordinate the issuance, completion and review of third-party questionnaires through the TPRM Tool.
- Monitor remediation activities and ongoing compliance requirements through to closure.
- Partner with internal stakeholders to facilitate the timely completion of risk management activities.
- Advise supplier relationship managers on TPRM requirements across the supplier lifecycle, including the required tools, templates and methodologies.
- Prepare third-party risk reports, metrics and management updates using ServiceNow, Tableau and Excel, identifying red flags and addressing them with supplier relationship managers.
- Identify industry trends in effective third-party relationship management and recommend opportunities to improve efficiency.
- Contribute to continuous improvement, process enhancement and automation initiatives within the TPRM Program.
What you'll need
- 3 years of experience in Third-Party Risk Management, Risk Management, Compliance, Information Security, Audit or a related field.
- Bachelor's degree in business, Finance, Risk Management, Technology or a related field, or equivalent experience.
- Knowledge of vendor risk management practices and regulatory requirements, including OSFI Guideline B-10.
- Proficiency in Microsoft Office applications, particularly Excel and PowerPoint.
- Artificial Intelligence (AI) literacy and the ability to apply responsible AI practices in day-to-day operations, including effective use of approved tools, critical review of AI-generated outputs, and awareness of related risks and controls.
- Strong analytical and problem-solving skills, with a demonstrated ability to identify, comprehend and resolve issues.
- Strong stakeholder management skills, with the ability to act independently and support business partners through the issue resolution process with suppliers.
- Excellent written and verbal communication skills.
- Ability to manage work to fixed deadlines and to report on progress transparently and concisely.
Nice to have
- Experience within a federally regulated financial institution (within Banking, Financial Service or Insurance sector).
- 1-2 years of working experience with ServiceNow.
Details
- Location: Gurugram, Haryana.
- Reports to the Associate Director within the Governance, Risk Management and Compliance (GRC) team.
- Posting end date: 13/11/2026.
Read the full description and apply on the company’s own careers page.