AVP - Third Party Risk Management

Covansis IT Services Llp; Mumbai; Vor Ort; INR 900.000 - 1.500.000; Vollzeit

Zusammenfassung

Covansis IT Services Llp is seeking a Third-Party Risk Management specialist in Mumbai to implement the bank's risk framework within the First Line of Defense. You will manage risk assessments, governance, data privacy compliance, and regulatory submissions, working with Procurement, Legal, Compliance, and IT Security.

Ideal candidates have 5-12 years in BFSI vendor risk, strong communication, and proficiency with MS Office and data visualization tools.

Qualifikationen

• CA or finance/risk management degree with relevant certifications.
• 5-12 years in vendor risk management within BFSI.
• Knowledge of TPRM frameworks, RBI outsourcing norms, DPDP Act compliance.
• Familiarity with GRC platforms and vendor risk tools.

Aufgaben

• Execute end-to-end vendor risk assessments, including inherent and residual risk scoring, due diligence, and control validation.
• Ensure compliance with outsourcing guidelines, internal governance frameworks, and DPDP Act obligations.
• Monitor KRIs, SLAs, and contractual obligations to identify deviations and emerging risks.
• Maintain risk registers, vendor inventory, and governance repositories in alignment with TPRM standards and audit requirements.
• Collaborate with cross-functional stakeholders (Procurement, Legal, Compliance, Information Security) to remediate control gaps and enforce contractual risk clauses.
• Support vendor onboarding/offboarding lifecycle, including risk signoffs and exit strategy compliance.
• Prepare risk dashboards, MIS reports, and regulatory submissions for senior management and audit committees.
• Assist in internal/external audits, regulatory inspections, and ensure timely closure of observations.
• Develop and prepare training materials to disseminate TPRM policies, procedures, and compliance requirements to internal stakeholders.
• Drive continuous improvement initiatives, including automation of risk workflows and integration of advanced monitoring tools.
• Stay abreast of emerging regulatory trends, cyber risk developments, and privacy frameworks impacting third-party ecosystems.

Kenntnisse

Risk analytics

Stakeholder engagement

Communication

MS Office

Data visualization

Vendor risk management

Ausbildung

CA

Bachelor's degree in Finance

Bachelor's degree in Information Security

Certifications: CRISC, CISA, CTPRP, CISSP

Tools

GRC platforms

Vendor risk tools

Jobbeschreibung

Role Details

Third Party Risk Management

• Employment Type: Full-Time with a leading multinational banking and financial services institution.
• Location: Mumbai
• Experience: 5-12yrs

Job description (JD)

Section 1: Purpose of the position

The person will be responsible for implementing the banks Third-Party Risk Management framework within the First Line of Dfense. This role ensures robust governance and oversight of vendor relationships by performing risk identification, assessment, and mitigation in compliance with regulatory mandates (RBI outsourcing norms), internal risk policies, and data privacy regulations (DPDP Act).

Section 2: Job Responsibilities

• Execute end-to-end vendor risk assessments, including inherent and residual risk scoring, due diligence, and control validation.
• Ensure compliance with outsourcing guidelines, internal governance frameworks, and DPDP Act obligations (data protection, breach notification, consent management).
• Monitor Key Risk Indicators (KRIs), Service Level Agreements (SLAs), and contractual obligations to identify deviations and emerging risks.
• Maintain risk registers, vendor inventory, and governance repositories in alignment with TPRM standards and audit requirements.
• Collaborate with cross-functional stakeholders (Procurement, Legal, Compliance, Information Security) to remediate control gaps and enforce contractual risk clauses.
• Support vendor onboarding/offboarding lifecycle, including risk signoffs and exit strategy compliance.
• Prepare risk dashboards, MIS reports, and regulatory submissions for senior management and audit committees.
• Assist in internal/external audits, regulatory inspections, and ensure timely closure of observations.
• Develop and prepare training materials to disseminate TPRM policies, procedures, and compliance requirements to internal stakeholders.
• Drive continuous improvement initiatives, including automation of risk workflows and integration of advanced monitoring tools.
• Stay abreast of emerging regulatory trends, cyber risk developments, and privacy frameworks impacting third-party ecosystems.

Section 3 : (a) Knowledge (b) Skills (c) Experience (d) Qualifications

• Education: CA, Bachelors degree in Finance, Risk Management, Information Security, or related discipline; professional certifications (CRISC, CISA, CTPRP, CISSP) preferred.
• Experience: 25 years in vendor risk management, operational risk, compliance, or audit within BFSI.
• Technical Expertise:
• Knowledge of TPRM frameworks, RBI outsourcing norms, DPDP Act compliance, and global standards (ISO 27001, NIST, SOC 2).
• Familiarity with GRC platforms and vendor risk tools.
• Core Skills:
• Strong risk analytics and control assessment capabilities.
• Excellent communication and stakeholder engagement skills for cross-functional collaboration.
• Ability to work under pressure, prioritize competing deliverables, and maintain accuracy.
• Proficiency in MS Office Suite and data visualization for reporting