Senior Manager Third Party Risk and Alliance Banking

African Bank; Midrand; On-site; ZAR 1,200,000 - 1,500,000; Full time

Job summary

A leading financial institution in Midrand seeks a Senior Manager for Third Party Risk and Alliance Banking. Responsible for establishing a robust third-party risk management framework, you will ensure compliance with regulatory requirements while fostering strong vendor relationships. The ideal candidate possesses a post-graduate degree and over 8 years of relevant experience in risk management within the banking sector. This full-time role offers growth in a dynamic financial environment.

Qualifications

• Minimum 8+ years management experience in risk management, operational risk, or third‑party risk management.
• Skilled in developing and applying TPRM frameworks aligned to banking regulatory requirements.
• Competence in developing dashboards and management reports using TPRM systems.

Responsibilities

• Lead third party risk management framework to identify and monitor risks.
• Manage and develop subordinate(s) and resources effectively.
• Design and maintain TPRM framework aligned with regulatory requirements.

Skills

Risk management

Operational risk

TPRM frameworks

Data analytics

Cross-functional collaboration

Education

Post Graduate degree in Risk Management / Finance / Law / Supply Chain / Business Administration

Job description

Senior Manager Third Party Risk and Alliance Banking

To establish and lead a robust third‑party risk management framework that governs how the bank identifies, manages, and monitors risks arising from external third‑party engagements including vendors, service providers, outsourcing partners, and critical suppliers. Ensure that third‑party relationships are strategically aligned to the bank’s business objectives while maintaining strong risk controls, regulatory compliance, and operational resilience.

Act as a trusted advisor and subject matter expert on third‑party risk, working across Group functions and business clusters to embed risk culture, strengthen governance, and ensure that third‑party dependencies do not compromise the bank’s customer commitments, data protection, or operational continuity.

Minimum Education and Experience

• Post Graduate degree in Risk Management / Finance / Law / Supply Chain / Business Administration or related qualification
• Minimum 8+ years management experience in risk management, operational risk, or third‑party risk management with demonstrated experience in implementing or managing TPRM frameworks within the banking or financial sector
• Deep understanding of end‑to‑end third‑party lifecycle management (due diligence, onboarding, monitoring, renewal, and exit)
• Skilled in developing and applying TPRM frameworks, methodologies, and tools aligned to banking regulatory requirements
• Strong understanding of banking outsourcing/TPRM regulations (e.g., PRA SS2/21, EBA Outsourcing Guidelines, OCC 2013‑29, DORA, Basel, GN5)
• Ability to integrate third‑party and Alliance Banking oversight into resilience planning, impact tolerance setting, and exit strategies
• Skilled in designing and interpreting KRIs, risk dashboards, and concentration risk analysis
• Ability to use data analytics to monitor vendor performance, concentration risk, and control effectiveness
• Competence in developing dashboards and management reports using TPRM systems
• Builds strong cross‑functional relationships with Procurement, Legal, Compliance, IT, and Business Units

Role Responsibilities

Management of Resources

• Manage and develop subordinate(s): Performance management in terms of contracting, reviews and poor performers, Training and development, Employee relations
• Manage people efficiencies through leave management, headcount budget, fixed term contracts, staff movements, secondments, staff utilization
• Take appropriate disciplinary measures as required
• Facilitate induction of new staff within one month of joining the organization

Third Party Risk Governance

• Assist to design, maintain, and continuously improve the bank’s enterprise‑wide TPRM framework, ensuring it aligns with regulatory requirements, industry best practice, and internal risk appetite
• Define clear risk taxonomy and classification for third‑party relationships (critical, high‑risk, material outsourcing, non‑material)
• Ensure alignment with regulatory requirements (e.g., Basel, Prudential Authority, SARB, POPIA, and global outsourcing standards)
• Establish governance mechanisms, risk appetite statements, and escalation processes for third‑party engagements
• Provide independent second line reviews, sign‑off, or challenge before contracts are signed with material vendors and Alliance partners
• Translate the bank’s enterprise risk appetite into specific limits and tolerances for third‑party risk (e.g., acceptable dependency levels, concentration thresholds, resilience requirements)
• Develop, maintain, and continuously refine a risk assessment methodology that evaluates third parties across multiple risk domains
• Provide independent challenge to first line functions (procurement, vendor management, IT, business units) on third‑party risk assessments and monitoring
• Drive adoption of risk‑based tiering of third parties (critical, high, medium, low)
• Evaluate vendor concentration risk and dependency exposure
• Monitor concentration risks across critical vendors, geographies, and services
• Ensure transparent reporting of issues, breaches, and regulatory findings
• Provide second line oversight of vendor‑related incidents, disruptions, or breaches (e.g., data breaches, cyber‑attacks, service outages)
• Challenge root cause analysis and track remediation actions
• Escalate systemic or material third‑party risk issues to senior governance committees

Incident and Issue Management

• Design and maintain a Third‑Party Incident Management Framework aligned to the bank’s enterprise incident and operational risk policies
• Define clear criteria for incident classification (e.g., minor, significant, or material) based on impact on operations, customers, financial loss, or regulatory exposure
• Monitor systemic or concentration risks arising from third parties
• Establish communication channels and escalation procedures for business owners and service providers to immediately report third‑party incidents or control failures
• Lead or coordinate cross‑functional investigations into the cause and impact of third‑party incidents
• Report vendor incidents, near‑misses, or breaches to senior management, highlighting root causes, remediation plans, and potential business impact
• Ensure that lessons learned from incidents are captured and communicated for continuous improvement
• Provide training and guidance on risk identification, control execution, and reporting responsibilities

Reporting

• Prepare and present periodic Third Party Risk Reports for submission and summarize material vendor risks, concentration risks, and resilience gaps in a clear, actionable format for senior decision‑makers
• Highlight emerging trends, regulatory developments, and systemic vulnerabilities in the third‑party landscape
• Develop and maintain interactive dashboards that provide visibility of:
  • Third‑party inventory and criticality tiering.
  • Risk assessment outcomes and trends
  • Key Risk Indicators (KRIs) and performance metrics (SLAs, breaches, overdue remediations)
  • Ensure reporting aligns with the risk appetite and tolerance levels, flagging areas where thresholds are breached or at risk of breach
  • Maintain a robust audit trail of risk reporting, including supporting evidence and follow‑up actions for regulatory review

Stakeholder Engagement

• Act as a trusted advisor to business unit leaders on third‑party risk exposure and mitigation strategies
• Engage with third parties to clarify risk expectations, compliance requirements, and performance standards
• Partner closely with Procurement to align supplier onboarding, due diligence, and contracting practices with the TPRM framework
• Work with Legal to ensure that third‑party contracts contain adequate risk clauses, SLAs, exit provisions, and data protection requirements
• Collaborate with Internal Audit during independent assurance reviews
• Support audits by providing comprehensive evidence of TPRM processes, governance structures, and remediation follow‑ups
• Provide evidence and assurance that the bank’s TPRM practices meet regulatory expectations and industry best practices
• Lead internal awareness and capability‑building sessions on third‑party risk governance

Seniority Level

Mid‑Senior level

Employment Type

Full‑time

Job Function

Finance

Industry

Banking