Third-Party Risk Analyst / Assessor TPRM (MNC)

Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd; Petaling Jaya; On-site; MYR 134,000 - 212,000; Full time

Job summary

Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd on behalf of a multinational corporation is seeking a Third-Party Risk Analyst/Assessor (TPRM) to evaluate third-party risks across cybersecurity, privacy, compliance, and business continuity.

You will conduct risk assessments, identify findings, and collaborate with internal and external stakeholders to strengthen controls and oversight across regions.

Qualifications

• Bachelor’s degree or relevant professional qualification is required.
• 3+ years of experience in risk management, audit, or related field.
• Experience conducting third-party risk assessments and evaluating internal controls.
• Strong analytical, communication and stakeholder management skills.
• Able to manage assessments independently and collaborate across functions and regions.
• Experience in a complex, regulated environment.
• Proficiency in ISO27001 preferred.

Responsibilities

• Conduct third-party risk assessments through questionnaire reviews, interviews, evidence evaluation and control testing.
• Identify findings, recommend mitigation measures and assess residual risk.
• Review corrective action plans and monitor third-party risks and remediation progress.
• Collaborate with internal stakeholders and third parties on assessments, ongoing monitoring and offboarding requirements.
• Support improvements to risk questionnaires, scoring standards, reporting and awareness initiatives.

Skills

Analytical skills

Stakeholder management

Communication

Independent working

Education

Bachelor’s degree

CISA

CRISC

CISM

CIPP

CIPT

CTPRP

Job description

Third-Party Risk Analyst / Assessor TPRM (MNC)

We are hiring on behalf of an MNC for a risk professional to assess third-party risks and support effective controls across cybersecurity, privacy, compliance, business continuity and other business risk areas.

Job Responsibilities

Conduct third-party risk assessments through questionnaire reviews, interviews, evidence evaluation and control testing.

Identify findings, recommend mitigation measures and assess residual risk.

Review corrective action plans and monitor third-party risks and remediation progress.

Collaborate with internal stakeholders and third parties on assessments, ongoing monitoring and offboarding requirements.

Support improvements to risk questionnaires, scoring standards, reporting and awareness initiatives.

Job Requirements

Bachelor’s degree or a relevant professional qualification such as CISA, CRISC, CISM, CIPP, CIPT or CTPRP.

Minimum 3 years of experience in risk management, audit, operational risk or a related field.

Experience conducting third-party risk assessments and evaluating internal controls.

Strong analytical, communication and stakeholder management skills.

Able to manage assessments independently and collaborate across functions and regions.

Experience in a complex, regulated environment.

Proficiency in ISO27001 are preferred.

Why Join Us?

Gain exposure to an MNC’s third-party risk management programme.

Collaborate with stakeholders across functions and regions.

Broaden your knowledge across cybersecurity, privacy, compliance and business continuity.

Build hands-on experience in risk assessments, control evaluation and mitigation.

Contribute to improvements in risk standards, processes and reporting.

Your application will include the following questions:

• Which of the following statements best describes your right to work in Malaysia?


• What's your expected monthly basic salary?


• Which of the following types of qualifications do you have?


• How much notice are you required to give your current employer?