Third-Party Risk Management Lead – 12-Month Contract

EFG Private Banking; Zürich; Vor Ort; CHF 180.000 - 260.000; Vollzeit

Zusammenfassung

EFG International, based in Zurich, seeks a 12-month temporary Information Security Third Party Risk Management professional. Lead end-to-end TPRM lifecycle, governing onboarding, risk assessments and ongoing monitoring for third-party providers and outsourced services.

You will collaborate across Procurement, Legal, Compliance and IT Security, reporting to the TPRM Manager under the Group Chief Information Security Officer, shaping risk posture over 1–5 years.

Qualifikationen

• Minimum 10 years in information security or risk management.
• Experience in third-party/vendor risk in financial services.
• Strong analytical and stakeholder management skills.

Aufgaben

• Lead onboarding, risk assessment, due diligence and approvals before contract signature or go-live.
• Define inherent risk scope based on data sensitivity and outsourcing status.
• Coordinate due diligence with IS, Compliance, Legal, Operational Risk, BCP and Procurement.
• Perform third‑party risk assessments across security, data protection, resilience and ESG.
• Evaluate controls design and effectiveness; agree remediation timelines and residual risk.
• Classify third parties into risk tiers and set monitoring thresholds.
• Oversee ongoing monitoring plans, periodic reassessments and event-driven reviews.
• Own TPRM platform configuration, workflows, scoring models and user roles.
• Deliver training on TPRM processes to Business Owners and controls.
• Serve as central advisor for stakeholders on TPRM matters.

Kenntnisse

Fluent English

Analytical thinking

Strong coordination

Stakeholder management

Risk-based decision making

Ausbildung

High school diploma or equivalent

University degree preferred

Tools

TPRM platform

Workflow tools

Data-driven dashboards

Jobbeschreibung

EFG International, based in Zurich, seeks a 12-month temporary Information Security Third Party Risk Management professional. Lead end-to-end TPRM lifecycle, governing onboarding, risk assessments and ongoing monitoring for third-party providers and outsourced services.

You will collaborate across Procurement, Legal, Compliance and IT Security, reporting to the TPRM Manager under the Group Chief Information Security Officer, shaping risk posture over 1–5 years.