Third Party Risk Operations Analyst

Orcapod Consulting Services; Bengaluru; On-site; INR 1,100,000 - 1,800,000; Full time

Job summary

Orcapod Consulting Services is seeking a detail-oriented Third Party Risk Operations Analyst in Bangalore, India. You will drive end-to-end third party risk lifecycle from onboarding to offboarding and support vendor master activities including sanctions screening and bank account validation.

The role requires independent work, effective cross-functional communication, and a continuous improvement mindset across risk and compliance operations.

Qualifications

• Bachelor's degree in Business, Finance, Risk Management, Supply Chain, or a related field.
• Strong analytical and problem-solving skills with a high attention to detail.
• Excellent written and verbal communication in English.

Responsibilities

• Perform end-to-end third party risk assessments across supplier onboarding and ongoing monitoring.
• Maintain risk records in the TPRM tool and support governance documentation.
• Coordinate with Sourcing, Vendor Management, Procurement, Legal, and Compliance.

Skills

Analytical skills

Attention to detail

Communication skills

Multitasking

Independent work

Education

Bachelor's degree in Business or related field

Tools

Microsoft Office

Excel

TPRM tools

Job description

Third Party Risk Operations Analyst

Location: Bangalore, India

Level: Analyst (CL5)

Department: Third Party Risk Management (TPRM) Operations

Reports To: TPRM Operations Manager

About the Role

The organization is seeking a detail-oriented and proactive Third Party Risk Operations Analyst to join our growing TPRM team in Bangalore, India. In this role, you will be a key contributor to the end-to-end third party risk lifecycle from onboarding and risk assessment through ongoing monitoring and offboarding. You will also support vendor master activities including supplier registration, sanctions screening, and bank account validation.

This is an analyst-level position suited for someone who can work independently with minimal supervision, communicate effectively across cross-functional teams, and bring a continuous improvement mindset to risk and compliance operations.

Key Responsibilities

THIRD PARTY RISK ASSESSMENTS

• Perform end-to-end third party risk assessments as part of the supplier onboarding process.
• Review the results of the Internal Inherent Risk Questionnaire (IRQ) to determine the inherent risk classification of a supplier.
• Review external vendor questionnaires and supporting evidence to validate that identified risks are mitigated through proper controls.
• Maintain accurate and up-to-date risk records for all suppliers within the TPRM tool.
• Consult with Second Line SMEs and TPRM Oversight teams on complex or elevated risk scenarios.

LIFECYCLE MANAGEMENT

• Facilitate the onboarding process for new vendors, ensuring compliance with procurement policies and TPRM protocols.
• Manage the ongoing risk lifecycle of suppliers including periodic reassessments, risk monitoring, and offboarding activities.
• Understand the role of TPRM within the broader end-to-end procurement process and how it intersects with sourcing and contracting activities.
• Maintain positive and professional relationships with suppliers, addressing concerns or issues promptly to support long-term partnerships.
• Identify and implement solutions to improve risk monitoring strategies and reduce assessment cycle time.

VENDOR MASTER & COMPLIANCE OPERATIONS

• Execute supplier registration activities within the vendor master system, ensuring data accuracy and completeness.
• Perform sanctions screening for new and existing suppliers in accordance with regulatory and internal policy requirements.
• Conduct bank account validation reviews to support accurate and compliant payment processing.
• Ensure all vendor master activities comply with company policies, financial controls, and applicable regulatory requirements.

REPORTING & GOVERNANCE

• Support light reporting activities including regional compliance metrics and TPRM program dashboards.
• Assist in the drafting, socializing, and implementation of TPRM governance documentation and controls.
• Support regulatory compliance activities for upcoming regulations and assist in establishing regional reporting requirements.
• Assist in internal and external audits by providing necessary documentation and information related to procurement and risk activities.

CROSS-FUNCTIONAL COLLABORATION

• Work cross-functionally across stakeholder teams including Sourcing, Vendor Management, Procurement, Legal, and Compliance.
• Serve as a reliable point of contact for internal stakeholders on TPRM-related processes and inquiries.
• Collaborate effectively with global team members and operate with a high degree of autonomy and accountability.

Required Qualifications

• Bachelors degree in Business, Finance, Risk Management, Supply Chain, or a related field.
• 24 years of experience in third party risk management, procurement operations, vendor management, or a related compliance/risk function.
• Familiarity with TPRM frameworks, inherent risk assessments, and vendor due diligence processes.
• Experience with vendor master management, including supplier registration, sanctions screening, or payment validation.
• Strong analytical and problem-solving skills with a high attention to detail.
• Ability to manage multiple priorities and work independently with minimal supervision in a fast-paced environment.
• Excellent written and verbal communication skills in English.
• Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint); experience with GRC or TPRM tools is a plus.

Preferred Qualifications

• Experience working in a global or multinational organization, particularly within financial services, fintech, or technology sectors.
• Familiarity with procurement compliance frameworks, sanctions regulations (OFAC, EU, UN), or AML/KYB processes.
• Experience with tools such as Coupa, SAP Ariba, ServiceNow, Archer, or similar platforms.
• Professional certifications such as CTPRP, CISA, CRISC, or similar risk/compliance designations.