Third-Party Risk Manager — Regulated Finance Leader

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,339,000 - 1,786,000; Full time

Benefits offered by this job

Above market salary

HMO on Day 1 for principal and two de­

Government-mandated benefits

Performance-based incentives

Quarterly company events

1,000 PHP De Minimis

Equipment and software provided

Job summary

Hammerjack Pty Ltd is seeking an experienced Third-Party Risk Manager to own the day-to-day operation of the TPRM program. You will oversee onboarding, risk tiering, due diligence, ongoing monitoring, and termination across the vendor lifecycle, ensuring compliance with policy and regulatory expectations.

The role requires collaboration with Legal, Compliance, and Information Security, reporting to the CIO.

Qualifications

• Must have 5+ years in third-party risk management, vendor management, or related fields.
• Experience in regulated financial services environments preferred.
• Ability to evaluate SOC 1/2 reports and information security docs.
• Strong vendor management software experience and process improvement.
• Excellent communication with senior leadership and business stakeholders.

Responsibilities

• Determine inherent risk tier for each third party prior to contracting.
• Conduct onboarding assessments and reassess as needed on schedule.
• Administer DDQs, SOC 1/2 reports, financial statements, and insurance docs.
• Maintain authoritative vendor inventory with risk tier, services, data classifications.
• Manage vendor management software, profiles, document collection, and audit history.
• Monitor vendors against regulatory lists and escalate any matches.
• Coordinate contract reviews to include security, confidentiality, and data handling clauses.
• Track vendor incidents, breaches, and remediation activities; report to leadership.

Skills

Vendor risk management

SOC 1/2 reviews

Regulatory compliance

Stakeholder comms

Project management

MS 365 proficiency

Data privacy

Vendor management software

Tools

VendorRisk.com

Venminder

ProcessUnity

Archer

Job description

Hammerjack Pty Ltd is seeking an experienced Third-Party Risk Manager to own the day-to-day operation of the TPRM program. You will oversee onboarding, risk tiering, due diligence, ongoing monitoring, and termination across the vendor lifecycle, ensuring compliance with policy and regulatory expectations.

The role requires collaboration with Legal, Compliance, and Information Security, reporting to the CIO.