AVP - Third-Party Risk Management (TPRM)

OCBC; Kuala Lumpur; On-site; MYR 90,000 - 180,000; Full time

Job summary

OCBC in Kuala Lumpur seeks an experienced risk professional to lead Third-Party Risk Management activities and uphold the TPRM framework across the organisation.

You will provide guidance on risk processes and controls, support the TPRC with risk assessments, and escalate material risks. The role emphasises governance, strong stakeholder collaboration, and end-to-end lifecycle oversight from pre-onboarding to offboarding in a dynamic tech-enabled environment.

Qualifications

• Minimum 5 years in risk management, with a strong foundation in operational risk.
• Experience supporting or working with risk committees.
• Exposure to digital/technology environments with basic technical understanding.

Responsibilities

• Partner closely with Service Owners, Functional Specialists and Due Diligence team to implement and uphold the TPRM framework.
• Provide guidance and advisory on third-party risk processes and controls.
• Support the Third-Party Risk Management Committee (TPRC), including reviewing materials and risk assessments and escalating key risks.
• Oversee the full TPRM lifecycle: pre-onboarding, onboarding, ongoing monitoring, offboarding, including risk classifications.
• Act as liaison for the TPRM workflow/system, translating policies into practical processes, and supporting users.

Skills

Risk management

Stakeholder management

Analytical mindset

Clear communication

Tools

TPRM systems/tools

Job description

• Partner closely with Service Owners, Functional Specialists and Due Diligence team to implement and uphold the TPRM framework.
• Provide guidance and advisory on third-party risk processes and controls.
• Support the Third-Party Risk Management Committee (TPRC), including:
• Reviewing materials and risk assessments.
• Highlighting and escalating key risks and issues.

End-to-End TPRM Lifecycle Management

• Oversee and advise on the full TPRM Lifecycle: Pre-onboarding, Onboarding, Ongoing monitoring, Offboarding.
• Review risk assessments, classification, and materiality of third-party arrangements.
• Guide stakeholders on:
• ii. Approval processes
• iii. Implementation of appropriate risk controls

Systems & Process Enablement

• Act as the key liaison for the TPRM workflow/system.
• i. Translating policies into practical system processes
• ii. Supporting users with guidance and troubleshooting
• iii. Escalating system issues to vendors when needed
• iv. Participate in any ad-hoc projects / reviews / process improvement initiatives.

Monitoring, Reporting & Issue Management

Monitor and report third-party risk profiles and key risk indicators.

Conduct independent reviews of issues or breaches and track through to resolution.

Ensure timely escalation of significant risks/events to Senior Management.

Maintain and review the third-party register and related records.

Support regulatory and audit engagements by acting as a liaison with regulators, auditors, and external parties, ensuring timely, accurate, and consistent responses on third-party risk matters.

Who We’re Looking For

Experience:

• Minimum 5 years in risk management, with a strong foundation in operational risk
• Experience supporting or working with risk committees
• Technical & Functional Skills:
• Exposure to digital/technology environments with basic technical understanding.
• Hands-on experience with systems/tools; able to guide users and troubleshoot issues.

Core Competencies:

• Strong stakeholder management and cross-functional collaboration.
• Clear and effective communication skills.
• Analytical mindset with attention to detail.

Why Join Us

• Opportunity to work at the centre of enterprise risk governance.
• High visibility role with exposure to senior management.
• Collaborative environment with cross-functional impact.