Assistant Vice President, Risk - Third Party Risk Management

CIMB; Malaysia; On-site; MYR 120,000 - 160,000; Full time

Job summary

A leading financial institution in Malaysia seeks an Assistant Vice President, Risk specializing in Third Party Risk Management. The role involves developing and maintaining a robust risk management framework, ensuring compliance with regulatory requirements, and providing governance and advisory on third party risk assessments. The ideal candidate will have 6-8 years of related experience, preferably in banking or financial services, along with a relevant degree. This full-time position offers a chance to influence risk management practices across the organization.

Qualifications

• 6 - 8 years of experience in compliance, operational risk, or third party risk management.
• Experience with regulator bodies such as BNM is preferred.
• Experience in Supply Chain Management advisory is an advantage.

Responsibilities

• Develop and maintain a Third Party Risk Management framework.
• Drive compliance with regulatory requirements for third party management.
• Provide governance and advisory on risk assessments for third party engagements.
• Report third party risks to relevant risk committees.
• Conduct training and awareness sessions on managing third party risk.

Skills

Compliance

Operational Risk Management

Third Party Risk Management

Governance

Education

Bachelor's Degree in Information Systems/Business/Banking/Finance/Accounting/Statistics/Economics/IT

Job description

Assistant Vice President, Risk - Third Party Risk Management

Malaysia

Job Description

Job Purpose:

• As the second line of defence, responsible for the development, implementation and on-going maintenance of an effective and consistent Third Party Risk Management framework with coverage of outsourcing, partnerships and vendors/suppliers engagements.
• The responsibility includes providing governance, oversight and advisory to support Business Units (BUs) / Business Enablers (BEs) in managing third party risks.
• Responsible to support Head, Regional Third Party Risk Management to oversee the governance and reporting wih respect to third party risks within the Group.

Key Responsibilities:

• Drive the implementation and embedding a robust Third Party Management Framework across the Group ensuring compliance to regulatory requirements where applicable.
• As the 2nd line of defence, provide governance, oversight and advisory on Third Party Risk Management related matters in providing consultation to all BUs/BEs in performing third party risk assessments to identify potential failure points, threats, and vulnerabilities and implement appropriate mitigation controls to minimise the impact to the organisation throughout the engagements with third party with support from other key stakeholders (i.e. Technology Risk Management, Business Continuity Management, Technology, Data Governance, Legal & Compliance, Admin & Property Management, Procurement and Finance).
• To provide management with a view of the Groups Third Party Risk as part of the Groups preparedness and capabilities in the event of a major disruption. Timely reporting and awareness in relation to third party risks to relevant risk committees as per framework requirement.
• To promote a culture in managing third party risk through awareness sessions, engagement sessions, focus group sessions or trainings to BUs/BEs.
• Work closely with Service Recipients (SRs) / Service Owners (SOs) of BUs/BEs Risk Control Units (RCUs) / Risk Control Specialists (RCSs) / Designated Compliance & Operational Risk Officers (DCOROs) to ensure third party risks/incidents/events are promptly identified, escalated and addressed as per Operational Risk Management framework.

Job Specification:

• Bachelor's Degree or Professional Qualification in the relevant discipline (Information Systems / Business / Banking / Finance / Accounting / Statistics / Economics / IT)
• 6 - 8 years of experience of compliance, operational risk, third party risk, outsourcing fields, preferably in established bank / financial institutions.
• Preferably 1-2 years experience dealing with regulator bodies such as BNM.
• Candidates with experience in Supply Chain Management advisory or practice or legal contract management will be an advantage.

Job Info

• Job Identification 32114
• Job Category Risk
• Posting Date 10/15/2025, 08:26 AM
• Apply Before 12/31/2025, 08:26 AM
• Job Schedule Full time
• Job Shift Day Shift