Global Third-Party Risk Management Lead

EY; Philippines; On-site; PHP 1,500,000 - 2,100,000; Full time

Job summary

EY is seeking a Third Party Risk Management (TPRM) Manager to lead risk advisory projects for global clients. You will deliver quality work, coordinate with engagement teams, and nurture client relationships while coaching junior staff.

The role emphasizes developing new methodologies and ensuring EY standards across engagements. The position involves guiding teams, driving business development, and contributing to thought leadership within a dynamic, global firm.

Qualifications

• Strong knowledge of information security concepts, risk and controls concepts.
• Knowledge of ISO 27001/2, ISO 22301, ISO 27018, PCI – DSS, HITRUST.
• Familiarity with regulations such as FISMA, HIPAA, Reg SCI, MAS.
• Good TCP/IP, OSI layer, networking and security concepts.
• Windows/Linux security and database security knowledge.
• Familiarity with OWASP and Secure SDLC standards/frameworks.
• Experience with IT infrastructure (switches/routers/firewalls/IDS/IPS).
• Knowledge of security architecture design and reviews.
• Experience in LAN/WAN architectures and reviews.
• Knowledge of Privacy, Governance and reporting.
• Knowledge of anti-virus solutions.
• Knowledge of incident management, DR and BC/DR.
• Knowledge of Cryptography and physical security.
• Knowledge of Asset Security and IAM.
• Certifications such as CISSP, CISA, CISM, CEH, ISO 27001 Lead Auditor/Lead Implementer.
• Business Continuity Planning and DR process knowledge.
• BE/BTech/MCA with 4-7 years of industry experience.

Responsibilities

• Provide guidance and share knowledge with team members on complex issues.
• Maintain client relationships and manage expectations on service, timing and deliverables.
• Apply industry knowledge to identify tech developments and impacts for clients.
• Drive business development activities on existing engagements.
• Create innovative insights and contribute to thought leadership documents.
• Facilitate discussions with client personnel and EY leadership.
• Plan and deliver on client engagements with regular status updates.
• Ensure high-quality work per EY standards and improve efficiency.

Skills

Information security concepts

Risk management

Project management

Client relationship management

Education

BE/BTech/MCA

Tools

OWASP

ISO standards

Job description

EY is seeking a Third Party Risk Management (TPRM) Manager to lead risk advisory projects for global clients. You will deliver quality work, coordinate with engagement teams, and nurture client relationships while coaching junior staff.

The role emphasizes developing new methodologies and ensuring EY standards across engagements. The position involves guiding teams, driving business development, and contributing to thought leadership within a dynamic, global firm.