Senior TPRM Manager: Drive Vendor Excellence

NightOwl Consulting Philippines Inc.; Philippines; On-site; PHP 1,339,200 - 1,785,600; Full time

Benefits offered by this job

Above market salary

HMO on Day 1

Government benefits

Performance incentives

Quarterly events

De minimis allowance

Equipment provided

Job summary

NightOwl Consulting Philippines Inc. seeks a Third-Party Risk Manager to oversee the day-to-day operation of the company’s TPRM program. You will manage vendor onboarding, due diligence, ongoing monitoring, and lifecycle termination in line with policy TP RM02.

You will be the primary contact for business owners, vendors, and internal partners, coordinating with Legal, Compliance, Information Security, and Finance to ensure accurate risk information and reporting for leadership.

Qualifications

• Experience evaluating SOC 1 & 2 reports, security questionnaires, financial statements, insurance docs, business continuity materials.
• Ability translate findings into clear risk decisions for leadership.
• Experience administering a vendor management software platform.

Responsibilities

• Determine inherent risk tier for each vendor before engagement.
• Perform inherent risk assessments at onboarding and reassess when changes occur.
• Administer DDQs, SOC reports, and regulatory documentation.
• Maintain authoritative third-party inventory and vendor data.
• Track vendor incidents and remediation efforts; report to leadership.
• Coordinate with Legal on contract clauses including security and data terms.
• Prepare periodic TPRM reporting for committees and executives.

Skills

Regulatory landscape knowledge

SOC 1 & SOC 2 evaluation

Vendor management platform

Risk management framework

Written & verbal communication

Project management

Microsoft 365 (Excel/Word/Outlook)

Data privacy handling (NPI)

Tools

VendorRisk.com

Venminder

ProcessUnity

Archer

Job description

NightOwl Consulting Philippines Inc. seeks a Third-Party Risk Manager to oversee the day-to-day operation of the company’s TPRM program. You will manage vendor onboarding, due diligence, ongoing monitoring, and lifecycle termination in line with policy TP RM02.

You will be the primary contact for business owners, vendors, and internal partners, coordinating with Legal, Compliance, Information Security, and Finance to ensure accurate risk information and reporting for leadership.