Role
Third Party Risk Management (TPRM) Analyst
Experience
5 - 8 Years
Job Location
Bangalore
JD
The Third Party Risk Management (TPRM) Analyst is responsible for assessing and managing risks associated with third-party vendors and partners. The role involves conducting due diligence, performing risk assessments, classifying vendors based on risk levels, ensuring compliance with organizational policies, and developing risk mitigation strategies in collaboration with procurement and business stakeholders.
Eligibility
- Minimum 15 years of regular, full-time education (10 + 2 + 3)
- Should be flexible with night shifts & rotational shifts
Skills
- Third Party Risk Management (TPRM)
- Third Party Due Diligence (TPDD)
- Vendor Risk Assessment
- Risk Classification & Scoring
- Compliance & Governance
- Risk Mitigation Planning
- Procurement Risk Management
- Supplier Risk Management
- Regulatory Compliance
- Risk Reporting & Documentation
- Stakeholder Management
- TPRM Tools
- ERP Systems
- Data Analysis & Reporting
- Audit & Control Frameworks
Responsibilities
- Conduct impact assessments and evaluate third-party risks.
- Classify third parties into High, Medium, and Low-risk categories based on established risk frameworks.
- Perform end-to-end third-party due diligence activities.
- Work with leading TPRM tools to assess, monitor, and manage vendor risks.
- Collaborate with Procurement and Business stakeholders to develop and implement risk mitigation strategies.
- Ensure third parties comply with organizational TPRM policies, standards, and regulatory requirements.
- Identify potential risks and recommend appropriate remediation actions.
- Maintain and manage third-party risk databases, repositories, and documentation.
- Track due diligence activities, risk mitigation plans, and remediation milestones.
- Partner with internal stakeholders to gather requirements and resolve risk-related issues.
- Serve as a point of contact for third-party risk management queries and escalations.
- Prepare reports on due diligence status, risk ratings, compliance posture, and mitigation activities.
- Maintain accurate audit trails and supporting documentation for governance and compliance reviews.