Qureos Mentor

OSB Group

Job Purpose
 Vendor Management team is a control function which overseas and reports on the effectiveness of vendor performance and risk management for the Group.
 <ul>
<li>Vendor Management is primarily responsible for executing the Group’s vendor management and outsourcing requirements in compliance with Group policies and business strategy.</li>
<li>Ensure timely processing of risk assessments, risk acceptances, and ongoing monitoring of program compliance inline with the Group approved Vendor Management & Outsourcing policy and associated procedures.</li>
<li>Assist the business in on boarding, ongoing monitoring, and exiting/ terminating relationships with vendors.</li>
<li>Plan, deliver and report risk assessment activity over supplier arrangements with the intent to identify measure, mitigate and report key risks.</li>
<li>Delivering continuing change into the business as policy and procedures evolve</li>
</ul>
Responsibilities
 
Required Responsibilities but not limited to: 
Core responsibilities
 
1. Risk Assessment and Due Diligence: 
<ul>
<li>Conduct detailed risk assessments of third-party vendors and service providers, focusing on areas such as financial stability, security practices, regulatory compliance, and overall risk exposure.</li>
<li>Perform initial and ongoing due diligence, gathering and analysing data from various sources to assess the risk profile of third-party entities.</li>
</ul>
2. Vendor Onboarding and Offboarding: 
<ul>
<li>Support the vendor onboarding process by conducting thorough risk evaluations and providing recommendations for approval or rejection.</li>
<li>Manage the offboarding process of third-party vendors, ensuring proper documentation and risk mitigation steps are followed.</li>
</ul>
3. Monitoring and Reporting: 
<ul>
<li>Develop and maintain an up-to-date inventory of third-party relationships, including risk ratings and criticality assessments.</li>
<li>Continuously monitor third-party performance and compliance through regular assessments, reviews, and audits.</li>
<li>Prepare and present detailed reports and dashboards on third-party risk status, trends, and remediation efforts to senior management and other stakeholders.</li>
<li>Report and publish Vendor Management KRI reporting at key governance forums on a monthly basis</li>
</ul>
4. Policy and Procedure Development: 
<ul>
<li>Assist in the development, implementation, and maintenance of third-party risk management policies, procedures, and guidelines.</li>
<li>Ensure policies and procedures are aligned with industry best practices, regulatory requirements, and organizational goals.</li>
</ul>
5. Collaboration and Stakeholder Engagement: 
<ul>
<li>Work closely with procurement, legal, compliance, IT, Architecture team and other relevant departments to ensure third-party risk management processes are integrated and effective.</li>
<li>Act as a liaison between the organization and third-party vendors, facilitating communication and resolving issues related to risk management.</li>
</ul>
6. Training and Awareness: 
<ul>
<li>Develop and deliver training programs to internal stakeholders on third-party risk management processes, tools, and best practices.</li>
<li>Promote awareness of third-party risk management throughout the organization to ensure a culture of risk awareness and accountability.</li>
</ul>
7. Incident Response and Remediation: 
<ul>
<li>Assist in the investigation and resolution of incidents involving third-party vendors, including data breaches, compliance violations, and performance failures.</li>
<li>Coordinate remediation efforts and ensure corrective actions are implemented and tracked.</li>
</ul>
8. Regulatory Compliance: 
<ul>
<li>Stay current with regulatory developments and industry standards related to third-party risk management.</li>
<li>Ensure third-party risk management activities comply with applicable laws, regulations, and industry standards.</li>
</ul>
9. Continuous Improvement: 
<ul>
<li>Identify opportunities for improving third-party risk management processes, tools, and methodologies.</li>
<li>Participate in projects and initiatives aimed at enhancing the efficiency and effectiveness of the third-party risk management program.</li>
</ul>
10. Data Analysis and Insights: 
<ul>
<li>Utilize data analytics to identify trends, patterns, and potential risks within the third-party ecosystem.</li>
<li>Provide actionable insights and recommendations to mitigate identified risks and enhance the overall risk management framework.</li>
</ul>
Other Responsibilities
 <ul>
<li>Vendor Management forms processed and completed as per the Due Diligence Matrix of the Group Vendor Management & Outsourcing Policy (VM&O policy) with 100% accuracy and in-time to plan.</li>
<li>Support the review of BCP/ DR and Contingency plan along with remediation action for the Group’s vendors by working with ROs, relevant stakeholders.</li>
<li>Administratively manage monthly Vendor Management Committee and other key governance meetings (schedule meetings, build pack, draft minutes, and issue) by working with Line Manager (LM) and Functional Manager (FM)</li>
<li>Maintain Vendor Management Group shared folder structure in accordance with Group record management policy.</li>
<li>Assist and support the team in updating the Group’s vendor database with appropriate oversight/ approval with evidence on a monthly basis.</li>
<li>Support LM and FM in all Audit open actions to be close as per the agreed timeline in 100% of the cases, without extensions.</li>
<li>Support ROs in presenting Outsourcer Annual Report Document at Key governance forum on a monthly basis.</li>
<li>Support vendor management ad hoc projects/ tasks (not part of BAU and Change initiatives) within the agreed timeline with LM and FM</li>
<li>Support InfoSec Team in the review of IT Security questionnaire for vendors by liaising with Relationship owners (RO), Information Security team and vendor in line with VM&O policy and Information Security policy.</li>
<li>Maintain the company’s compliance standards and ensure timely completion of all mandatory on-line training modules and attestations</li>
<li>Accountability to ensuring best in class core vendor supplier risk analysis of applicable portfolio ensuring consistency with industry leading practices and conform to all the internal vendor procedure / policies and all related regulatory expectations.</li>
<li>Active engagement key front line governance routine inclusive of strategic planning session, governance committees and business review.</li>
<li>High awareness and adherence to the control environment including Quality Assurance and Quality Control.</li>
<li>Maintain the company’s compliance standards and ensure timely completion of all mandatory on-line training modules and attestations</li>
</ul>
Experience Requirements
 <ul>
<li>Overall experience of 8 – 10 years, preferably in Banking and Financial Services</li>
<li>At least 3-5 years of work experience in Third Party Risk Management roles and / or supply chain risk management, preferably in Banking and Financial Services</li>
<li>Experience in a relationship and stakeholder management.</li>
</ul>
Knowledge Requirements
 <ul>
<li>Experience with vendor lifecycle and/or supplier management process, including knowledge of Third Party and outsourcing regulations, is a definitive advantage.</li>
<li>Excellent success in supporting engagements or other problem-solving initiatives requiring coordination of cross-functional team members with varied backgrounds and skills.</li>
<li>Good understanding of information security management, Data Privacy, IT service continuity, IT disaster recovery, business continuity management, and third-party control assurance</li>
<li>Demonstrate sound understanding of risk and risk management processes and quality assurance.</li>
<li>Knowledge of current applicable regulatory requirements relevant to regulated financial institutions (FCA, PRA, ICO)</li>
<li>Proficient in PowerPoint, PowerBI, Excel, and key analytics tool (TPRM system)</li>
<li>Strong interpersonal and communication skills (both written and verbal) and ability to work collaboratively, as one team.</li>
<li>Ability to think laterally and develop new and innovative solutions to problems.</li>
<li>Ability to effectively manage competing priorities.</li>
<li>Ability to identify and implement process improvement opportunities</li>
</ul>
Required Qualifications/Certifications
 <ul>
<li>GSCE/GCE qualifications in both maths and English are essential</li>
<li>Bachelor’s degree (graduate degree) is essential.</li>
<li>Suitable qualification in risk management or quality assurance</li>
<li>Certification or sound knowledge and understanding of continuous improvement methodologies (Ex: Lean, Six Sigma, FMEA)</li>
</ul>
Responsibilities re Information Security Management System (as per ISO 27001 Certification Requirements)
 <ul>
<li>Ensure strict adherence to company’s security policies and procedures (for ex: Password policy, clear screen and clear desk policy, etc.)</li>
<li>Take ownership of all the assets/information assigned and secure it in compliance with ISO 27001 standards implemented in the company.</li>
<li>Co-operate and co-ordinate for the internal audits conducted in the company (complying to ISO 27001 standard).</li>
<li>Report to the Incident Response Manager, any incidents you come across in the office with regard to Security threats like threats to physical asset & stored information or any risks detrimental to the Security Policies of the company, etc.,.</li>
<li>Responsible to supervise in ensuring that all personnel reporting to you shall observe all Security requirements and be appropriately trained in Security.</li>
</ul>

Senior Vendor Governance Officer IND

Join OSB Group and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

OSB Group

ABOUT_COMPANY

Senior Vendor Governance Officer IND