TPRM (Risk Management) MNC

Bright Prospect; Selangor; On-site; MYR 50,000 - 70,000; Full time

Job summary

A leading risk management firm in Malaysia is seeking a Risk Assessor to evaluate third-party risks and ensure compliance with internal frameworks. You will prepare detailed reports, conduct due diligence, and collaborate with various teams to mitigate risks. Candidates should possess a diploma or bachelor's degree in a related field with 3–5 years of relevant experience. Strong analytical and communication skills are essential for success in this role and to guide junior assessors.

Qualifications

• 3–5 years of experience in risk assessment, operational risk, audit, or compliance.
• Experience in contract review or third-party risk management preferred.
• Strong background in due diligence and remediation planning.
• Knowledge of audit processes, regulatory compliance, and data protection requirements.

Responsibilities

• Assess and mitigate risks across operational and financial areas.
• Conduct due diligence including TPQ reviews and financial screenings.
• Prepare reports and risk acceptance documents.
• Support audits to ensure compliance and risk management standards.

Skills

Risk Assessment

Analytical Skills

Stakeholder Engagement

Communication Skills

Education

Diploma or Bachelor's degree in Risk Management, Cybersecurity, Business Administration

Tools

Risk Assessment Tools (e.g., Aravo, D&B Risk Analytics)

Job description

Assess and mitigate risks across operational, financial, cybersecurity, and privacy areas.

Conduct due diligence, including TPQ reviews, financial screenings, and remediation planning.

Evaluate third‑party risks and ensure compliance with internal frameworks and regulations.

Analyse risk metrics and scorecards to support informed decisions.

Prepare reports, risk acceptance documents, and residual risk evaluations.

Support audits and ensure adherence to compliance and risk management standards.

Collaborate with Procurement, Legal, Cybersecurity, and Risk teams on mitigation strategies.

Liaise with third parties and internal stakeholders throughout assessments.

Guide junior assessors and assist in onboarding new team members.

Act as a subject matter expert (SME) in privacy, cyber risk, or TPQ assessments when needed.

Job Requirements

• Diploma or Bachelor’s degree in Risk Management, Cybersecurity, Business Administration, or related field.
• At least 3–5 years of experience in risk assessment, operational risk, audit, or compliance.
• Experience in contract review or third‑party risk management preferred.
• Professional certifications (CISA, CRISC, CIPP/E) are a plus.
• Strong background in due diligence, TPQ reviews, and remediation planning.
• Knowledge of audit processes, regulatory compliance, and data protection requirements.
• Understanding of cyber risk, privacy regulations, and information security standards.
• Proficient with risk assessment tools (e.g., Aravo, D&B Risk Analytics).
• Strong analytical, documentation, and reporting skills.
• Effective stakeholder engagement and communication skills.

For those who have what it takes, please apply online or sent in your profile to:
Consultant: Lara
Tel: [phone]

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .