AVP, Third-Party Risk Management, Operations Management Office

Sumitomo Mitsui Banking Corporation (SMBC); Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

A leading finance institution in Singapore is seeking an experienced professional in Third-Party Risk Management. The role involves managing the risk lifecycle, performing due diligence assessments, and providing guidance on TPRM processes. Ideal candidates will have a Bachelor's degree and significant experience in banking and risk management, with knowledge in technology and cyber risk being advantageous.

Qualifications

• 5 years working experience in banking or financial services.
• At least 3 years in Third-Party Risk Management or Technology Risk Management.
• Experience with risk and control assessment.

Responsibilities

• Manage the lifecycle of third-party risk management.
• Perform assessment on due diligence checks.
• Provide guidance to contract owner on TPRM process.

Skills

Risk management

Communication skills

Interpersonal skills

Education

Bachelor's degree

Job description

Job Responsibilities

• Be part of a regional team in managing the lifecycle of third-party risk management (TPRM) i.e. onboarding, ongoing monitoring and termination
• Perform assessment on due diligence check from Contract Owner/ Vendor, with primary focus on technology and cyber risk domains
• Provide guidance & support to contract owner on TPRM process
• Administer record keeping and documentation of third party
• Prepare MIS and KRIs relating to TPRM
• Work closely with stakeholders from TPRM 3 lines of defence in the region to effectively coordinate and execute TPRM controls
• Support in process enhancement/ project where necessary

Job Requirements

• Bachelor’s degree with 5 years working experience in banking or financial services, during which at least 3 years were in the capacity of Third-Party Risk Management and/or Technology Risk Management
• Experience of managing risk and control assessment
• Good communication and interpersonal skills
• Working experience in a regional role would be advantageous
• Priority will be given to candidate with in-depth knowledge of technology and cyber risk domain
• Certification such as CTPRP, CTPRA, CISSP, CRISC, CRCM would be advantageous