TPRM Associate: Risk Management & Compliance

EY; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

EY GDS Consulting – MS RSS Team in the Philippines is seeking Staff skilled in Third-Party Risk Management to join the leadership group. You will help design, implement and optimize TPRM operating models, evaluate complex risks, and drive improvements across client engagements.

You will work closely with EY teams to translate strategy into tangible outcomes, including automation and data analytics, while fostering strong client relationships and opportunities for growth within a dynamic,

Qualifications

• 1 to 4 years of demonstrated experience with Risk Management across the Third-Party engagement lifecycle.
• Strong understanding of the TPRM framework, Risk Management, Information Security practices.
• Demonstrate a good understanding of Contract Risk Review management process.
• Hands-on exposure to TPRM tools and technology solutions (e.g., GRC enablement solutions).
• Demonstrated knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI - DSS, HITRUST, etc.
• Good knowledge of privacy regulations such as GDPR, CCPA, etc.
• Good knowledge of regulations such as FISMA, HIPAA, Reg SCI, MAS, etc.
• Good knowledge of TCP/IP, OSI layers, networking and security concepts.
• Good knowledge of OS (Windows/Linux) security, Database security, IT infrastructure, security architecture design.
• Familiarity with OWASP and Secure SDLC, anti-virus solutions.
• Experience in LAN/WAN architectures and reviews.
• Knowledge of incident management, disaster recovery and business continuity, cryptography.
• Big-4 experience is a plus.
• Certifications such as CISSP, CISA, CISM, CTPRP, CIPP, ISO 27001 Lead Auditor/Lead Implementer are desirable.

Responsibilities

• Lead and work closely with the manager in the delivery of Third-Party Risk Management engagements.
• Lead the design and implementation of TPRM operating models and evaluate risks.
• Follow policies and procedures for TPRM implementations.
• Document end-to-end business processes and functional requirements.
• Assess application of legal and regulatory requirements to TPRM practices.
• Lead or participate in technology enhancements such as Automation, Data Analytics, AI for TPRM.
• Assist in selecting approaches, methods, and tools for service offerings.
• Demonstrate knowledge of EY products and service lines.
• Build and nurture relationships with clients to deliver exceptional service.
• Identify opportunities to improve engagement profitability.
• Support leadership in business development and account management.
• Collaborate across EY Consulting Services and other services.

Skills

Risk management

TPRM

Data analytics

Regulatory knowledge

Auditing

Information security

Contract risk

Education

Bachelor's degree in IT/CS/IS

CISSP

CISA

CISM

ISO 27001 Lead Auditor/Lead Implementer

Tools

ProcessUnity

ServiceNow

Archer

Prevalent

Job description

EY GDS Consulting – MS RSS Team in the Philippines is seeking Staff skilled in Third-Party Risk Management to join the leadership group. You will help design, implement and optimize TPRM operating models, evaluate complex risks, and drive improvements across client engagements.

You will work closely with EY teams to translate strategy into tangible outcomes, including automation and data analytics, while fostering strong client relationships and opportunities for growth within a dynamic,