Internal Control - Vendor Governance & TPRM

Airtel Payments Bank; Gurugram District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Airtel Payments Bank is seeking an experienced professional to lead GRC Projects & Vendor Governance, driving governance, risk, and compliance initiatives across the organization. You will shape transformation programs, implement regulatory requirements, and strengthen third-party risk management controls.

The role involves collaborating with Compliance, Operations, Product, and Technology teams to ensure effective governance and timely delivery of risk mitigation actions, with a focus on

Qualifications

• Bachelor’s degree in engineering, technology, information systems, risk management, finance, or business administration.
• Postgraduate qualifications such as MBA or PGDM are advantageous.
• 2-4 years of experience in managing GRC projects, vendor governance, and TPRM.
• Experience with GRC applications and TPRM tools.
• Strong understanding of GRC processes, risk management, and compliance requirements.
• Proficiency in project management and basic data analytics.
• Ability to analyze data and generate actionable insights.

Responsibilities

• Lead end-to-end GRC projects across control functions and regulatory requirements.
• Design roadmaps and implement governance, risk, and compliance transformation initiatives.
• Drive automation and process optimization in GRC activities.
• Coordinate ARRs for outsourced vendors and track remediation.
• Prepare vendor governance dashboards and MIS with key risk indicators.

Skills

GRC processes

Risk management

Compliance requirements

Project management

Data analytics

Actionable insights

Education

Bachelor’s degree (Engineering/Tech/IS)

MBA / PGDM / masters in risk management/finance

Tools

RSA Archer

Jocata

Trident

TPRM tool

Job description

We are seeking an experienced and dynamic candidate for GRC Projects & Vendor Governance to join our team. The ideal candidate will play a critical role in managing Governance, Risk & Compliance (GRC) transformation initiatives and strengthening the Bank's Vendor Governance framework. The role will be responsible for driving GRC projects, process automation, regulatory implementations, and overseeing Third-Party Risk Management activities, ensuring compliance with regulatory requirements and organizational objectives. The individual will collaborate extensively with cross-functional teams to improve controls, enhance governance processes, and drive technology-led solutions.

Key Responsibilities:

Role Allocation:

The role will entail approximately 70% focus on Governance, Risk & Compliance (GRC) Projects and 30% focus on Vendor Governance and Third-Party Risk Management (TPRM) activities, ensuring effective control oversight, regulatory compliance, and operational governance across the Bank.

A. GRC Projects, Transformation & Regulatory Initiatives

• Lead and manage end-to-end GRC projects across different control functions, ensuring alignment with business objectives and regulatory requirements.
• Work closely with internal stakeholders to gather requirements, design project roadmaps, and implement solutions.
• Drive governance, risk, compliance, audit, and control-related transformation initiatives across the organization.

2. Optimize Existing Applications, Process Automation & Efficiency Enhancement

• Identify manual, repetitive, and resource-intensive activities across GRC and control functions that can be automated.
• Evaluate existing processes and recommend technology-driven solutions to improve efficiency, accuracy, and scalability.
• Drive automation initiatives in collaboration with business and technology teams.
• Monitor automation outcomes and ensure sustainable benefits through continuous process optimization.

3. Regulatory Compliance & Circular Implementation

• Analyze regulatory circulars, guidelines, and compliance requirements issued by regulators and internal governance bodies.
• Coordinate with Compliance, Operations, Product, and Technology teams to ensure timely compliance with regulatory mandates.
• Conduct gap assessments and track closure of identified action items.
• Maintain implementation evidence and documentation to support audits and regulatory reviews.

4. Project Governance & Delivery Management

• Track and manage project timelines, milestones, dependencies, and deliverables.
• Provide regular updates to senior management on project status, risks, issues, and resource requirements.
• Proactively identify and resolve project bottlenecks to ensure timely delivery.
• Establish governance mechanisms to ensure effective project execution.

B. Vendor Governance & Third-Party Risk Management

1. Vendor Governance & Risk Oversight

• Support the implementation and ongoing governance of the Vendor Governance and Third-Party Risk Management (TPRM) framework.
• Coordinate Annual Risk Reviews (ARRs) for outsourced and critical vendors through onsite and virtual assessments.
• Track vendors audit observations, risk findings, and remediation actions until closure.
• Conduct periodic follow-ups with stakeholders and vendors to ensure timely closure of observations.
• Support monitoring and reporting of control deficiencies and risk exposures.

3. Outsourcing Governance & Control Testing

• Conduct quarterly assessment of the Outsourcing Governance Scorecard
• Identify control gaps, track remediation actions, and ensure timely closure of observations.
• Prepare periodic reporting on control testing results, compliance status, and key risk indicators.
• Coordinate with Legal, Product, Procurement, Compliance, and Business teams for execution, renewal, amendment, and closure of vendor agreements.
• Identify opportunities for enhancement of the TPRM platform and governance workflows.
• Drive automation and process improvements within the vendor lifecycle management process.
• Prepare and present periodic Vendor Governance dashboards and MIS covering:
• Annual Risk Review status
• Open observations and remediation status
• Key vendor-related risks and escalations

Skills & Qualifications:

• Education:
• Bachelor’s degree in either of these fields engineering, Technology, Information Systems, Risk Management, Finance, Business Administration, or a related discipline.
• Postgraduate qualifications such as MBA, PGDM, or master’s degree in risk management, Finance, Information Systems, or related fields will be an added advantage.
• Experience:
• 2-4 years of experience in managing GRC projects or similar roles, Vendor Governance, Third-Party Risk Management, Project Management
• Experience with GRC applications (e.g. RSA Archer, Jocata, Trident or similar tools) and TPRM Tool that are familiar with compliance frameworks
• Technical Skills:
• Strong understanding of GRC processes, risk management, and compliance requirements
• Proficiency in project management and basic knowledge of data analytics
• Ability to analyze data and generate actionable insights