Vice President, Third Party Risk Management

SUMITOMO MITSUI BANKING CORPORATION Singapore Branch; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

An international banking institution in Singapore is seeking a professional to operationalize third party risk management within APAC. The role involves designing risk control measures, assessing third party incidents, and promoting a risk-aware culture among stakeholders. Candidates should ideally have 3+ years in vendor or operational risk management with relevant certifications being advantageous.

Qualifications

• Minimum 3 years experience in vendor/third party risk management.
• Certifications such as CTPRP, CTPRA, CISSP, CRISC are advantageous.
• Proactive, resourceful, and a critical thinker.

Responsibilities

• Operationalize Third Party Risk Management framework for APAC.
• Design and implement risk control measures and best practices.
• Drive timely completion of Third Party risk deliverables.

Skills

Knowledge of outsourcing/third party risk requirements

Project management skills

Strong oral and written communication

Stakeholder and people management

Critical thinking

Culturally sensitive

Tools

Knowledge of MAS TPRM/TRM guidelines

Familiarity with ITIL, SAS, NIST, ISO27001/2

CISM

CRISC

Job description

Responsibilities

• Operationalize Third Party Risk Management framework for APAC (risk identification/ assessment/ monitoring/ reporting, policies, procedures, standards) and exercise oversight of all Third Party risk management activities.
• Design, determine and establish KRIs, implement risk control measures and best practices (e.g. Due Diligence for Third-Party Service Providers/Outsourcing arrangements) with Operational Resilience (i.e. BCM, Technology Risk and Operational Risk) in mind
• Drive timely completion of Third Party risk deliverables and resolution of key risk issues.
• Perform assessment of Third Party risk incidents, issues and trends, communicate technical concepts to non-technical audience and provide advisory as Subject Matter Expert (e.g. for new product applications, outsourcing of services and engagement of Third Party vendors and service providers).
• Reporting to senior management at risk management committees.
• Cultivate and promote a strong Third Party risk culture.

Requirements

• Good knowledge of outsourcing/third party, technology and operational risk requirements and industry standards, such as MAS TPRM/TRM guidelines, ITIL, SAS, NIST, ISO27001/2
• Minimum 3 years experience in vendor/ third party, IT / Cloud outsourcing or operational risk management, preferably in banking or financial services.
• Certifications such as CTPRP, CTPRA, CISSP, CRISC, CRCM, as well as CISSP, CISA, CISM and CRISC would be advantageous.
• Good project management skills and experience a plus
• Ability to perform gap analysis of Third Party risk management policies and processes against new regulatory requirements and guidelines.
• Self-starter and a critical thinker.
• Proactive, resourceful and able to think and act strategically and tactically.
• Able to multi-task and work independently under tight timelines.
• Strong oral and written communication skills.
• Strong stakeholder and people management skills.
• Culturally sensitive and good leadership qualities.