Global Third-Party Risk Analyst & Controls Specialist

Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd; Petaling Jaya; On-site; MYR 134,000 - 212,000; Full time

Job summary

Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd on behalf of a multinational corporation is seeking a Third-Party Risk Analyst/Assessor (TPRM) to evaluate third-party risks across cybersecurity, privacy, compliance, and business continuity.

You will conduct risk assessments, identify findings, and collaborate with internal and external stakeholders to strengthen controls and oversight across regions.

Qualifications

• Bachelor’s degree or relevant professional qualification is required.
• 3+ years of experience in risk management, audit, or related field.
• Experience conducting third-party risk assessments and evaluating internal controls.
• Strong analytical, communication and stakeholder management skills.
• Able to manage assessments independently and collaborate across functions and regions.
• Experience in a complex, regulated environment.
• Proficiency in ISO27001 preferred.

Responsibilities

• Conduct third-party risk assessments through questionnaire reviews, interviews, evidence evaluation and control testing.
• Identify findings, recommend mitigation measures and assess residual risk.
• Review corrective action plans and monitor third-party risks and remediation progress.
• Collaborate with internal stakeholders and third parties on assessments, ongoing monitoring and offboarding requirements.
• Support improvements to risk questionnaires, scoring standards, reporting and awareness initiatives.

Skills

Analytical skills

Stakeholder management

Communication

Independent working

Education

Bachelor’s degree

CISA

CRISC

CISM

CIPP

CIPT

CTPRP

Job description

Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd on behalf of a multinational corporation is seeking a Third-Party Risk Analyst/Assessor (TPRM) to evaluate third-party risks across cybersecurity, privacy, compliance, and business continuity.

You will conduct risk assessments, identify findings, and collaborate with internal and external stakeholders to strengthen controls and oversight across regions.