Specialist - Vendor Risk Management (VRM)

GSSTech Group; Abu Dhabi; On-site; AED 150,000 - 200,000; Full time

Job summary

A technology management firm in Abu Dhabi is seeking a Specialist in Vendor Risk Management. This role is crucial for the evaluation and management of vendor risks, requiring at least 3 years of experience in vendor management. The successful candidate will perform assessments, develop reporting mechanisms, and drive process improvements in vendor risk management. Comprehensive knowledge of compliance standards is preferred. Competitive compensation and a collaborative work environment are offered.

Qualifications

• Minimum of 3+ years related work experience in vendor management or vendor risk management.
• Extensive working experience in Business Risk Management and Operational Risk is preferred.
• Comprehensive knowledge of auditing and continuous quality improvement methodologies.

Responsibilities

• Perform evaluation of Third Party and Vendor engagements to identify and manage vendor risk.
• Complete inherent and overall risk assessments.
• Develop and perform reporting for vendor risk management activities.

Skills

Vendor management

Risk assessment

Data analysis

Quality control

Compliance standards familiarity

Education

Bachelor’s degree in business administration or related field

Job description

The Specialist, Vendor Risk Management, is responsible for utilizing intermediate knowledge and skills to execute Third-Party and Vendor Risk management activities. This role involves effectively evaluating, assessing, managing, and reporting on Vendor risks. The candidate will perform the core Vendor risk assessment process, support the Head of Vendor Risk Management with ongoing monitoring, and drive continuous process improvements.

Key Responsibilities

Vendor Risk Assessment & Due Diligence

• Perform evaluation of Third Party and Vendor engagements to identify and manage vendor risk.
• Complete inherent and overall risk assessments.
• Initiate and manage the due diligence process with cross-functional control groups.
• Review and score inherent risk questionnaires and complete overall risk assessment summaries.
• Serve as the subject matter expert in interpreting requirements and improve awareness of Operational Risks faced by the Business from vendor failure/poor performance.
• Work with Strategic Sourcing/Legal/Business to mitigate losses through vendor compensation via robust contracts.

Reporting & Monitoring

• Develop and perform reporting for VRM, including data collection, consolidation, analysis, spreadsheets, and dashboards.
• Provide and maintain vendor risk reporting mechanisms, and track and report outcomes from vendor management activities.
• Support the Head of Vendor Risk Management with reporting and monitoring of vendor risks, including data collection and analysis, and periodic ongoing monitoring.

Process Improvement & Quality

• Analyze, update, and modify procedures and processes to identify and continuously implement vendor risk management process improvements.
• Complete quality control reviews and testing to ensure procedures are followed.
• Stay informed about the latest developments in the vendor risk management field.

Experience

• Minimum of 3+ years related work experience in vendor management or vendor risk management is required.
• Extensive working experience in Business Risk Management, Security Risk, Operational Risk, Internal Audit, and/or Controls related function is preferred.

Knowledge & Skills

• Comprehensive knowledge of applicable concepts and methodologies such as continuous quality improvement and auditing experience.
• Familiarity with industry compliance standards, such as ISO27001, PCI DSS, SOC1 (SSAE16) and SOC2.
• Understanding of governance structures used to manage vendor risk programs and vendor mitigation and oversight.

Education

• Bachelor’s degree in business administration, computer science, or a related field, or equivalent years of experience, is required.