Vice President, Third-Party Risk Management

Sumitomo Mitsui Banking Corporation Malaysia Berhad; Malaysia; On-site; MYR 180,000 - 220,000; Full time

Job summary

A leading global financial institution in Malaysia seeks a Vice President for Third-Party Risk Management. This role requires a strong background in Operational Risk Management with at least 8 years of experience in the financial services industry. You will be responsible for overseeing comprehensive risk management strategies and ensuring compliance with regulatory expectations. Ideal candidates should possess a relevant bachelor’s degree and professional certifications, and have the ability to lead cross-functional teams.

Qualifications

• Bachelor’s degree in risk management, business administration, finance, law, or related discipline.
• Professional certifications such as CTPRP, CRISC, CISA, or ISO 27001 Lead Auditor are highly preferred.
• Minimum 8–10 years of experience in Third-Party Risk Management or Operational Risk.

Responsibilities

• Lead ORM activities and oversee third-party risk management strategies.
• Implement operational risk management procedures using approved ORM tools.
• Prepare timely reports for submission to relevant stakeholders.

Skills

Operational Risk Management

Third-Party Risk Management

Risk assessment

Cybersecurity

Strong communication

Education

Bachelor’s degree in risk management or related discipline

CTPRP, CRISC, CISA, or ISO 27001 Lead Auditor

Tools

GRC platforms

TPRM dashboards

vendor management systems

Job description

Vice President, Third-Party Risk Management

Headquartered in Tokyo, Sumitomo Mitsui Banking Corporation (SMBC) is a leading global financial institution and a core member of Sumitomo Mitsui Financial Group (SMBC Group). Built upon our rich Japanese heritage since 1876, we put our customers first and provide seamless access to, from and within the Asia Pacific region. SMBC is one of the largest Japanese banks by assets and maintain strong credit ratings across our global integrated network. We work closely as one SMBC Group to offer personal, corporate and investment banking services to meet the needs of our customers.

With sustainability embedded within our strategy and operations, we are committed to creating a society in which today’s generation can enjoy economic prosperity and well-being, and pass it on to future generations.

Vice President, Operational Risk and Third-Party Risk Management.

The Vice President will lead and execute Operational Risk Management (ORM) activities and oversee development, implementation and management of comprehensive Third-Party risk management and strategies across the organization, in alignment with SMBC Malaysia’s ORM and TPRM Framework and regulatory expectations. This role is critical in ensuring robust risk controls and timely reporting across the organization.

Key Responsibilities

• Execute ORM and TPRM Processes: Implement operational risk management procedures using approved ORM tools, in accordance with SMBCMY’s ORM and TPRM Framework, internal guidelines, and Bank Negara Malaysia’s policies.
• Control: Enhance organization's resilience to disruption, sustaining critical operations and effectively managing operational and third-party risks.
• Reporting: Prepare accurate and timely periodic and ad hoc reports for submission to BNM, Regional Office, Head Office, and internal stakeholders.
• Develop comprehensive framework to effectively managing risks associated with third-party relationships and outsourcing arrangement.
• Serve as TPRM subject matter expert, keep abreast of emerging trends, regulatory developments and industrial benchmarks.
• Regular assessment of risks associated with vendors to ensure compliance to both regulatory and internal standards.
• Drive continuous improvements initiatives by evaluating and enhancing data analytics capabilities to optimize the efficiency and effectiveness of TPRM and outsourcing process.
• Be alert to incidents and trends which may constitute operational, Third-Party and Shariah Non-Compliance (SNC) risks and elevate the risks to Head, ORM or Co-CRO, where appropriate.
• Co-ordinate with business, functional lines in executing the ORM and TPRM processes, i.e. identify and assess operational, third-party and SNC risks, self-assessment of controls, reporting of loss incidents and Key Risk Indicators (KRI).
• Provide support to business and functional areas to ensure consistent identification and assessment of third-party risks in accordance with the established Framework and Procedures.
• Prepare timely and accurate periodical and ad hoc ORM reporting to BNM, respective risk committees, Regional and Head Office.
• Conduct training and awareness briefings to Heads of Departments and Operational Risk representatives on ORM and TPRM processes and tools.
• Promote and embed the culture of ORM and conduct risk awareness to all business and functional lines in their capabilities as process and risk owners.
• Ensure appropriate disclosure of confidential information to the relevant parties in accordance with regulatory requirements on managing such confidential information.
• In the absence of the Department Head, to assume control and day to day functions of the department, as authorised by the Head of Department.

Job Requirements

Education & Qualifications

• Bachelor’s degree in risk management, Business Administration, Finance, Law, or related discipline.
• Professional certifications such as CTPRP (Certified Third-Party Risk Professional), CRISC, CISA, or ISO 27001 Lead Auditor are highly preferred.
• Familiarity with Bank Negara Malaysia’s Outsourcing Policy Document, Operational Risk Guidelines, and PDPA 2010.

Experience

• Minimum 8–10 years of experience in Third-Party Risk Management, Outsourcing Governance, or Operational Risk within the financial services industry.
• Proven experience in Designing and implementing TPRM frameworks and governance models.
• Proven experience in Conducting due diligence, risk assessments, and contractual reviews for vendors and service providers.
• Proven experience in Managing outsourcing registers, risk treatment plans, and regulatory reporting.
• Proven experience in Experience in regulatory engagement with BNM and internal audit functions.

Technical Skills

• Third-party lifecycle management: onboarding, monitoring, renewal, and exit.
• Risk scoring models, control testing, and incident escalation protocols.
• Cybersecurity and data protection controls in outsourced arrangements.
• Business continuity planning (BCP) and disaster recovery (DR) for third-party dependencies.
• Familiarity with tools such as GRC platforms, TPRM dashboards, and vendor management systems.

Leadership & Communication

• Ability to lead cross-functional teams and collaborate with Legal, Compliance, Procurement, and IT.
• Strong communication skills to prepare and present reports to BNM, Regional Office, Head Office, and internal committees.
• Capable of driving a risk-aware culture and promoting third-party governance best practices.

This is indeed a good opportunity for you to chart your career collaboratively with SMBC to greater heights.