Risk & Prevention, Third Party Risk Manager

ocbc; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OCBC Bank in Singapore is seeking a Third-Party Risk Manager to strengthen outsourcing risk governance across Group Operations & Technology. You will provide risk oversight, constructive challenge, and practical risk advisory support to Service Owners throughout the third-party lifecycle.

You will partner with senior stakeholders across Technology, Operations, Procurement, Information Security, Legal, Compliance, and Internal Audit to govern material outsourcing arrangements and ensure adherence

Qualifications

• Experience in risk governance and outsourcing risk management.
• Familiarity with regulatory guidelines for outsourcing and TRM frameworks.
• Ability to work with multiple stakeholders across technology, operations and risk functions.

Responsibilities

• Govern the vendor lifecycle including onboarding, reviews, renewals and terminations.
• Maintain vendor inventory, outsourcing registers, risk ratings and classifications.
• Monitor risk events, issues, audit findings and remediation activities.
• Prepare risk dashboards, governance materials, management reports and KRIs.
• Support implementation and continuous improvement of TPRM and outsourcing governance frameworks.

Job description

WHO WE ARE:

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Description :

Group Operations and Technology (O&T) provides IT and backroom support across the Bank's business such as Group Consumer Financial Services, Group Corporate Banking, Global Treasury, and corporate functions, e.g., Group Risk Management, Group Finance, and Group Human Resources. It supports regional operations and drives resilience, service quality, productivity, and responsible technology adoption across Singapore, Malaysia, and other markets.

Group O&T Risk & Prevention (R&P) provides independent risk governance, oversight, and advisory support to Group Operations & Technology. The team promotes a strong risk and compliance culture, supports effective implementation of operational risk and regulatory requirements, and oversees the identification, escalation, and timely resolution of key risks and control issues.

Role Description :

As Third-Party Risk Manager, the successful candidate will help shape and strengthen third-party and outsourcing risk governance across Group Operations & Technology. You will provide risk oversight, constructive challenge, and practical risk advisory support to Service Owners throughout the third-party lifecycle. This role will proactively identify and assess emerging risks, partnering with stakeholders to develop practical mitigation strategies and ensure risks are effectively managed.

In this role, you will partner with senior stakeholders across Technology, Operations, Procurement, Information Security, Legal, Compliance, Operational Risk, and Internal Audit in the different markets, to govern material outsourcing arrangements and critical third-party relationships. The successful candidate will be responsible for strengthening the division's third-party risk governance and ensuring that vendor engagements and outsourcing arrangements are managed in accordance with internal policies, MAS Guidelines on Outsourcing, MAS Notice 658, MAS Technology Risk Management (TRM) Guidelines, and other applicable regulatory requirements

This role provides an opportunity for the successful candidate to shape the third-party risk governance within a large regional Operations & Technology environment. The role entails collaboration with senior stakeholders across the region and various functions across the Bank. It offers valuable experience in regulatory requirements, outsourcing oversight, operational resilience, as well as emerging technology and cybersecurity risks.

Duties and Responsibilities:

• Governance and oversight of the vendor lifecycle, including onboarding, periodic reviews, renewals, and termination processes.
• Maintain vendor inventory, outsourcing registers, risk ratings, and vendor classification records.
• Monitor risk events, issues, audit findings, and remediation activities to ensure timely closure.
• Prepare risk dashboards, governance committee materials, management reports, and key risk indicators (KRIs).
• Support the implementation and continuous improvement of the bank's TPRM and outsourcing governance frameworks, standards, and procedures within GO&T.
• Provide advisory support on MAS Guidelines on Outsourcing, MAS Notice 658, MAS TRM Guidelines, and internal TPRM requirements.
• Assist Service Owners in determining outsourcing applicability, materiality, and criticality in accordance with MAS requirements and internal policies.
• Review and challenge identified risks, control gaps, and mitigation plans to ensure appropriate risk management outcomes.
• Support audits, regulatory inspections, thematic reviews, and governance reviews relating to third party risk and outsourcing.
• Review technology and cybersecurity assessment outcomes for third-party providers and outsourcing arrangements.
• Assess vendor assurance reports and supporting documentation, including SOC reports, ISO certifications, and security assessments.
• Drive regional alignment and maturity uplift of third-party risk governance practices, including process simplification, control effectiveness, and consistent application of standards across O&