Vendor Risk Analyst - Third Party

Manpower (Philippines); Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Manpower Philippine is seeking a Risk Management Analyst to support the Third-Party Risk Management program on a long-term contract.

You will own the daily operations of third-party assessments, evaluate responses, escalate issues, and coordinate with stakeholders to meet SLAs, applying careful risk-based judgments throughout engagements.

Qualifications

• 2+ years in third-party risk management or vendor risk assessments.
• Ability to analyze risk questionnaire responses and identify gaps.
• Strong communication and collaboration with stakeholders.
• Proven ability to manage multiple tasks and meet deadlines.

Responsibilities

• Participate in execution of the 3PRM program.
• Own daily operations of third-party compliance assessments from onboarding to offboarding.
• Evaluate risk questionnaire responses for gaps and risk indicators; escalate findings.
• Assess accuracy of engagement information and escalate concerns.
• Coordinate with requestors to obtain documentation and drive timely completion.
• Maintain engagement status across workflow platforms and participate in daily check-ins.

Skills

Third-party risk management

Risk assessment

Analytical judgment

Communication skills

Organization

Google Workspace

Job description

Manpower Philippine is looking for a Risk Management Analyst!

This exciting new opportunity is a long-term, open-ended contract role. You're not the person who will settle for just any role. Neither is our client! Because they are looking for that certain kind of person who cares about making a difference. Here, you'll bring your professional expertise, talent, and drive to the Risk Management Analyst role.

Duties and Responsibilities:

• Serve as an active participant in the execution of the client's Third-Party Risk Management (3PRM) Program.
• Own and manage the daily operations of assigned third party compliance assessments across new onboarding, periodic reassessment, and offboarding lifecycle.
• Critically evaluate risk questionnaire responses and supporting documentation to identify gaps, inconsistencies, and risk indicators; **escalate findings to the appropriate lead.**
• Apply risk-based judgment to assess whether submitted information accurately reflects the scope and nature of an engagement; **escalate concerns proactively.**
• Coordinate with business requestors to obtain accurate documentation and drive timely completion of assigned assessments.
• Partner with subject matter expert reviewers across Security, Privacy, Legal, Tax, and Business Continuity to advance assessments within SLA thresholds.
• Conduct partner program enrollment reviews and apply sound judgment on approval, hold, and escalation decisions.
• Execute offboarding and deactivation tasks, confirming data handling obligations are addressed.
• Maintain accurate engagement status across all workflow platforms and participate in daily operational check-ins.
• Surface risk patterns or escalation signals that fall outside the defined process to the senior lead proactively.
• Serve as an initial point of contact for third parties during the assessment process, setting expectations on timelines and required documentation.

Required Skills and Qualifications:

• 2+ years of third-party risk management experience, including direct involvement in vendor risk assessment or compliance review processes.
• Demonstrated ability to analyze and critically evaluate risk questionnaire or compliance documentation -- not just collect and route it.
• Strong analytical judgment: ability to identify when a response is inconsistent, incomplete, or misaligned with known facts about an engagement.
• Excellent communication and interpersonal skills to collaborate effectively with business requestors, subject matter experts, and program leads.
• Strong organizational skills with the ability to manage a multi-item queue independently, self-prioritize, and meet deadlines.
• Demonstrated ability to quickly learn, understand, and apply program processes and risk frameworks across varied engagement types.
• Proficiency using Google Workspace (Docs, Sheets, Drive) and ability to work across multiple platforms simultaneously.
• Ability to use discretion and sound judgment when handling confidential and sensitive third-party information.