third party risk manager

HSBC

<div><p>Some careers shine brighter than others.</p><p>
If you&rsquo;re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.</p><p>
HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions.</p><p>
We are currently seeking an experienced professional to join our team in the role of Lead Business Analyst</p><p>
To be successful in this role, you should meet the following requirements:</p><ul><li>
Work with Service line mangers and BM for running cost board every week</li><li>
Responsible for reviewing all request submitted to cost board from commercial review and supplier type</li><li>
Contract Management and commercial management of supplier contracts</li><li>
Manage and review supplier contracts for measuring service credits and ensure adherence to KPI&rsquo;s are met by supplier</li><li>
Review of SOW and providing commercial and operational observation</li><li>
Creatively apply business and technical knowledge to enable, support and</li><li>
Review all aspects of third party spends</li><li>
Develop and maintain communication at all levels across the organization to facilitate smooth and effective running of cost board operation and outcomes for WPB.</li><li>
Interface with the Business Manager in putting together third party demand;</li><li>
Run third party risk management forum for WPB and ensure the COO of WPB executes contract post such due diligence;</li><li>
Ensure 100 % compliance of all Third Party Risk Management policy for all suppliers used by WPB IT</li><li>
Run vendor governance and performance management forum for all strategic and high critical vendors of WPB IT</li><li>
Develop demand management of third party across WPB IT</li><li>
Create contracts calendar and renewal process for WPB IT</li><li>
Interface with WPB Delivery organization and Architects for third party spend management</li></ul><p>
To be successful in this role, you should meet the following requirements:</p><ul><li>
Experience with Contract Management and negotiation of contracts in IT and ITES company; Financial Services industry</li><li>
Excellent written and verbal communication skills;</li><li>
Good process analysis and problem solving skills;</li><li>
Ability to drive change and improvement to existing processes and to create new processes;</li><li>
Decision-maker &ndash; considered and timely especially when under pressure;</li><li>
Ability to build relationships by communicating, influencing and negotiating effectively with business heads, senior managers, third party consultants, technical experts across the whole department and business users;</li><li>
Willingness to own work and problems and see through to completion and to use own initiative to resolve issues, whilst dealing with a diverse range of people;</li><li>
Strong interpersonal skills, coupled with the ability to succeed within a matrix management structure and build and maintain global team relationships;</li><li>
Ability to work with resources based in other locations;</li><li>
Proven ability to prioritise workload effectively in line with business priorities;</li><li>
&lsquo;Can Do&rsquo; attitude. Willing to turn a hand to whatever task is required;</li><li>
Ability to work with minimal supervision, work independently, proactively and under pressure against multiple deadlines</li><li>
and to contribute to a larger team; to have flexible approach to responsibilities;</li><li>
Self-motivation, and a proven rapid learning capability in a changing environment are essential;</li><li>
Drive and tenacity to ensure change is effectively implemented in a matrix environment</li></ul><p>
You&rsquo;ll achieve more when you join HSBC.<br>
www.hsbc.com/careers</p><p>
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.</p><p>
Issued by &ndash; HSBC Software Development India</p></div>

Business Analyst/ Lead Business Analyst

SunExpress

<div>
 <p>
  We&rsquo;re seeking a proactive and analytical
  <strong>
   Senior Risk &amp; Assurance Analyst
  </strong>
  to lead our supplier risk and assurance efforts. You&rsquo;ll be instrumental in protecting SunExpress from third-party and supply chain security risks, ensuring our partners meet rigorous information and cyber security standards.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Conduct risk assessments of third-party suppliers using SunExpress supplier and risk framework
  </li>
  <li>
   Lead supplier assurance activities: document reviews, security questionnaires, and site audits
  </li>
  <li>
   Evaluate supplier security practices, contracts, and operational controls
  </li>
  <li>
   Advise internal stakeholders and suppliers on security requirements and remediation strategies
  </li>
  <li>
   Collaborate with Procurement, Legal, Data Protection and Risk teams to embed security into supplier contracts and practices
  </li>
  <li>
   Track and report supplier risks, remediation actions, and assurance outcomes
  </li>
  <li>
   Contribute to continuous improvement of third-party risk management processes
  </li>
  <li>
   Operate in a professional, international environment where English is the primary business language
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications &amp; Skills
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Minimum - bachelor&rsquo;s degree in computer science/information security or a related field.
  </li>
  <li>
   6+ years proven and demonstrable experience in information security, assurance, or third-party risk management.
  </li>
  <li>
   Strong knowledge of security frameworks (e.g., ISO 27001, NIST, CIS).
  </li>
  <li>
   Familiarity with supplier contracts and embedding security requirements.
  </li>
  <li>
   Ability to communicate security risks to technical and non-technical audiences.
  </li>
  <li>
   Analytical mindset with a self-starter attitude.
  </li>
  <li>
   Excellent English communication skills (written and verbal).
  </li>
  <li>
   Professional certifications such as CISM, CISA, or ISO 27001 Lead Auditor/Implementer are a plus
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <em>
   SunExpress, as an Equal Opportunity Employer, welcomes all applicants independent of individual differences. We believe that having a diversified talent is our biggest strength. All decisions about our current and potential talent are based solely on criteria that have nothing to do with an applicant's attributes that are irrelevant to job performance; at SunExpress, we only focus on competency, know-how, skills, and experience.
  </em>
 </p>
</div>


Senior Risk & Assurance Analyst

NetApp

<p></p><div><p><b>About NetApp</b></p><p>
NetApp is the intelligent data infrastructure company, turning a world of disruption into opportunity for every customer. No matter the data type, workload or environment, we help our customers identify and realize new business possibilities. And it all starts with our people.</p><p>
If this sounds like something you want to be part of, NetApp is the place for you. You can help bring new ideas to life, approaching each challenge with fresh eyes. Of course, you won't be doing it alone. At NetApp, we're all about asking for help when we need it, collaborating with others, and partnering across the organization - and beyond.</p></div><p></p>
<br><div><div><div><div><div><h2 class="jobSectionHeader"><b>Job summary</b></h2></div><div><p>
Supplier Risk Program Manager. This position will be responsible for leading and managing NetApp&rsquo;s Third Party Risk Management (TPRM) program. This role requires close collaboration with stakeholders across Legal, Compliance, IT, and Procurement to manage third-party risks throughout their lifecycle. Additionally, this role will oversee initiatives related to conflict minerals compliance, modern slavery, and support various organizational activities such as customer audits, regulatory compliance requirements, reporting, policy and SOP governance.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job requirements</b></h2></div><div><div>
Key Responsibilities:<br>
<ul><li>Lead the TPRM Program</li><li>Execute and continuously improve the TPRM program and associated policies to align with industry best practices.</li><li>Maintain a comprehensive inventory of third parties, including risk ratings and ongoing monitoring; generate dashboards and reports.</li><li>Build relationships and consult with stakeholders to ensure effective business controls and mitigation of third-party risks.</li><li>Configure and manage the TPRM tool to support process workflows.</li><li>Deliver training programs on third-party risk management.</li><li>Serve as a TPRM ambassador within the organization to oversee, mitigate, and report on risks associated with third-party relationships.</li><li>Conflict Minerals and Modern Slavery</li><li>Oversee compliance initiatives related to conflict minerals regulations.</li><li>Manage the reporting requirements for these areas.</li><li>Collaborate with Procurement to devise and implement strategies for supplier inclusion efforts.</li></ul></div><div>
Additional Responsibilities:<br>
<ul><li>Address customer and regulatory audit requirements promptly.</li><li>Support the development and updating of Standard Operating Procedures (SOPs).</li><li>Develop and maintain relationships with key stakeholders within the organization.</li><li>Assist in miscellaneous activities that support the overall function of the procurement operations</li></ul></div><p>
Core competencies:</p><ul><li>Third Party Risk Management</li><li>Sustainable Procurement</li><li>Strategic thinking and planning</li><li>Supplier relationship management</li><li>Process improvement and optimization</li><li>Analytical and Data &ndash; driven decision making</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Education</b></h2></div><div><ul><li>Bachelor&rsquo;s degree in Business, or a related field MBA or other advanced degree preferred</li><li>Demonstrated 10+ years of track record in leading Third-Party Risk Management programs and processes.</li><li>Proven success in delivering comprehensive TPRM solutions for internal and external stakeholders.</li><li>Strong ability to influence and engage cross-functional teams effectively.</li><li>Familiarity with TPRM technologies (e.g., Prevalent, Omnea) and emerging AI tools.</li><li>Knowledge of conflict minerals regulations and sustainable procurement is highly desirable.</li><li>Excellent written and spoken communication, analytical, and project management skills.</li><li>Strong analytical skills with ability to leverage data for decision making process</li><li>Proven track record pf successful collaboration with cross functional teams and senior leaders</li><li>Experience in a global environment is preferred</li></ul></div></div></div><p>
At NetApp, we embrace a hybrid working environment designed to strengthen connection, collaboration, and culture for all employees. This means that most roles will have some level of in-office and/or in-person expectations, which will be shared during the recruitment process.
</p><p><b>Equal Opportunity Employer:</b></p><p>
NetApp is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all laws that prohibit employment discrimination based on age, race, color, gender, sexual orientation, gender identity, national origin, religion, disability or genetic information, pregnancy, and any protected classification.</p><p><b>
Why NetApp?</b></p><p>
We are all about helping customers turn challenges into business opportunity. It starts with bringing new thinking to age-old problems, like how to use data most effectively to run better - but also to innovate. We tailor our approach to the customer's unique needs with a combination of fresh thinking and proven approaches.</p><p>
We enable a healthy work-life balance. Our volunteer time off program is best in class, offering employees 40 hours of paid time off each year to volunteer with their favourite organizations. We provide comprehensive benefits, including health care, life and accident plans, emotional support resources for you and your family, legal services, and financial savings programs to help you plan for your future. We support professional and personal growth through educational assistance and provide access to various discounts and perks to enhance your overall quality of life.</p><p>
If you want to help us build knowledge and solve big problems, let's talk.</p>
<p><b>Submitting an application</b><br>
<br>
To ensure a streamlined and fair hiring process for all candidates, our team only reviews applications submitted through our company website. This practice allows us to track, assess, and respond to applicants efficiently. Emailing our employees, recruiters, or Human Resources personnel directly will not influence your application.</p></div></div><p></p>

Sourcing/Commodity Mgr

Revolut

<div><b>About Revolut</b><p></p><p>
People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products &mdash; including spending, saving, investing, exchanging, travelling, and more &mdash; help our 65+ million customers get more from their money every day.</p><p>
As we continue our lightning-fast growth,&zwnj; 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work&trade;. So far, we have 10,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.</p><p></p><b>
About the role</b><p></p><p>
The Outsourcing team is responsible for managing and overseeing outsourcing risks and other third-party arrangements, including regulatory obligations, operational resilience, and exit strategies.</p><p>
We&rsquo;re looking for an Outsourcing Manager to manage outsourcing oversight in India. You&rsquo;ll be the key point of contact for our primary service provider and local vendors, ensuring all contracts, SLAs, and governance meet Indian regulatory requirements.</p><p>
This is a unique opportunity to build the outsourcing framework from the ground up in one of our fastest-growing regions.</p><p>
Up to shape what's next in finance? Let&rsquo;s get in touch.</p><p></p><b>
What you'll be doing</b><p></p><ul><li>
Owning and implementing the third-party risk management policy and operating model for Revolut in India</li><li>
Managing outsourcing relationships, ensuring compliance with RBI outsourcing guidelines and Indian regulatory requirements</li><li>
Overseeing due diligence, risk assessments, and vendor monitoring for both intra-group and external providers</li><li>
Monitoring SLAs, downtime, subcontracting, patch management, and remediation plans to ensure service quality and operational resilience</li><li>
Collaborating with Compliance, Risk, and Operations to prepare audit-ready documentation, ensuring compliance with Indian regulatory obligations on outsourcing, capital adequacy, and operational resilience</li><li>
Providing guidance to staff on third-party risk management procedures and their ongoing accountability</li><li>
Preparing regular reports for senior management on outsourcing risks, compliance, and performance metrics</li><li>
Laying the foundation for a vendor management team in India as Revolut continues to scale</li></ul><p></p><b>
What you'll need</b><p></p><ul><li>
A bachelor&rsquo;s degree in business, finance, law, economics, or a related field</li><li>
7+ years of experience in vendor management, outsourcing oversight, or third-party risk management within financial services or fintech</li><li>
Solid knowledge of RBI outsourcing regulations and how they apply to financial institutions</li><li>
Experience developing service monitoring frameworks, due diligence processes, and risk assessments for outsourced arrangements</li><li>
Excellent stakeholder management skills across local and global teams</li><li>
Fluency in English</li></ul><p></p><b>
Nice to have</b><p></p><ul><li>
A risk management qualification</li><li>
Executive and board-level interaction experience</li><li>
Solid connections across industry stakeholder groups</li><li>
Previous experience in Big 4 consulting or vendor risk advisory</li><li>
A solid understanding of the fintech and/or banking landscape in India</li></ul><p></p><p><i>
Building a global financial super app isn&rsquo;t enough. Our Revoluters are a priority, and that&rsquo;s why in 2021 we launched our inaugural D&amp;I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We&rsquo;re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That&rsquo;s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.</i></p><p><b><i>
Important notice for candidates:</i></b></p><p><i>
Job scams are on the rise. Please keep these guidelines in mind when applying for any open roles.</i></p><ul><li><b><i>Only apply through official Revolut channels.</i></b><i> We don&rsquo;t use any third-party services or platforms for our recruitment.</i></li><li><b><i>Always double-check the emails you receive.</i></b><i> Make sure all communications are being done through official Revolut emails, with an @revolut.com domain.</i></li></ul><p><b><i>
We won't ask for payment or personal financial information during the hiring process.</i></b><i> If anyone does ask you for this, it&rsquo;s a scam. Report it immediately.</i></p><p><i>
By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Revolut. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Revolut may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Revolut's </i><i>Candidate Privacy Notice</i></p></div>

Outsourcing Manager

Visa

<div><b>Company Description</b><p><br>
Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose &ndash; to uplift everyone, everywhere by being the best way to pay and be paid.</p><p>
Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.</p><b><br>
Job Description</b><p><br>
We're seeking an exceptional Head of Corporate Risk to lead the implementation and embedding of Visa&rsquo;s Enterprise, Operational, Supervisory and Third-Party Risk Management framework across Central and Eastern Europe, Middle East and Africa (CEMEA). This is a pivotal role for a hands-on risk leader who thrives on making risk management real and actionable for the business&mdash;not just theoretical frameworks, but practical tools that drive better decision-making, transparency, and mitigation.</p><p>
You'll be responsible for ensuring our payments business has robust, embedded risk practices that provide management with clear visibility into our risk landscape and enable proactive mitigation. This role requires someone who can translate complex regulatory requirements and risk frameworks into practical business applications while building strong collaborative relationships across the organization.</p><p>
Key Responsibilities</p><p><b>
Enterprise &amp; Operational Risk Management</b></p><ul><li>
Implement and embed the Enterprise Risk Management (ERM) framework across the region, ensuring it becomes an integral part of how the business operates</li><li>
Drive the adoption and operationalization of the Operational Risk Framework, making risk identification, assessment, and mitigation a natural part business</li><li>
Partner with business teams across all functions to define in-scope processes for Risk and Control Self-Assessments (RCSA), ensuring comprehensive coverage of key operational activities</li><li>
Guide and enable business teams to complete RCSAs effectively, providing hands-on support, training, and quality assurance throughout the assessment process</li><li>
Drive consistent use of risk and issue logging system (GORO) across the region, ensuring data quality and completeness</li><li>
Establish processes that translate logged risks and issues into actionable management insights, driving awareness and appropriate response at all levels</li><li>
Work with business owners to develop and track risk mitigation plans, ensuring accountability and progress monitoring</li><li>
Develop comprehensive risk reporting that provides clear insights for senior management decision-making, highlighting trends, concentrations, and areas requiring attention</li><li>
Foster a culture where business teams view RCSA and risk assessment as valuable tools for their own operations, not just compliance exercises</li><li>
Collaborate with risk teams across other sub-regions to identify emerging risks and share best practices</li></ul><p><b>
Third-Party Risk Management</b></p><ul><li>
Own end-to-end third-party lifecycle management including due diligence, onboarding approvals, and ongoing monitoring</li><li>
Embed robust vendor risk assessment processes that balance thoroughness with business agility</li><li>
Ensure third-party risks are properly identified, measured, and mitigated throughout the vendor relationship</li><li>
Collaborate with global third-party risk teams on projects and initiatives, ensuring regional alignment while addressing local requirements</li><li>
Embed and disseminate global best practices in third-party risk management across the region, adapting them appropriately for local context</li><li>
Provide timely reporting and escalation of significant third-party risks to management and risk committees</li><li>
Contribute regional insights and lessons learned to global third-party risk frameworks and standards</li></ul><p><b>
Supervisory Risk Management</b></p><ul><li>
Partner closely with Legal, Country Management, Government Engagement and Compliance teams to ensure all regulatory requirements and changes are thoroughly understood and implemented flawlessly and on time</li><li>
Translate regulatory requirements into practical business changes and control enhancements</li><li>
Maintain deep understanding of the regional regulatory landscape affecting payments operations</li><li>
Work closely with global regulatory and supervisory risk teams on cross-border projects and initiatives to ensure consistent approaches</li><li>
Adopt and disseminate global regulatory best practices while ensuring they are appropriately tailored to regional supervisory expectations</li><li>
Establish robust processes for timely reporting and escalation of regulatory risks, breaches, and supervisory matters to management and risk committees</li><li>
Ensure proactive communication with global teams regarding emerging regulatory changes and their potential regional impact</li></ul><p><b>
Risk Governance &amp; Committee Management</b></p><ul><li>
Lead and facilitate the regional risk committee, ensuring it serves as an effective forum for surfacing and discussing key risks with senior management</li><li>
Drive consistent governance standards, frameworks, and reporting templates across all sub-regional risk committees to ensure quality and comparability</li><li>
Ensure local and sub-regional risks are adequately identified, discussed, and documented in sub-regional risk committees with appropriate rigor and accountability</li><li>
Establish clear escalation protocols and criteria to ensure material risks from sub-regional committees are escalated to the regional risk committee on a timely basis</li><li>
Develop high-quality, insightful content and materials that drive meaningful management discussions and decision-making at both regional and sub-regional levels</li><li>
Create a committee environment that encourages balanced, constructive conversations about risk appetite, emerging threats, and mitigation strategies</li><li>
Ensure risk committees highlight critical risks to the business in a clear, actionable manner that prompts appropriate management attention and response</li><li>
Drive accountability for risk decisions and follow-up actions identified in committee discussions across all levels</li></ul><p><b>
Critical Skills &amp; Attributes</b></p><ul><li><b>
Entrepreneurial self-starter -</b> You take initiative, identify gaps, and drive solutions without waiting to be told</li><li><b>
Hands-on implementation expert</b> - You roll up your sleeves and get into the details&mdash;this isn't a purely strategic role</li><li><b>
Outstanding collaboration skills</b> - You build strong relationships across functions and geographies, influencing without authority</li><li><b>
Exceptional communicator</b> - Superior written and verbal communication skills with ability to articulate complex risk concepts clearly to diverse audiences</li><li><b>
Strong leadership abilities</b> - Proven team leader who can inspire, develop, and manage high-performing risk professionals</li><li><b>
Business acumen</b> - You understand how to balance risk management with business objectives and operational realities</li><li><b>
Change management capability</b> - Experience driving organizational change and adoption of new frameworks and processes</li></ul><p><b>
Personal Characteristics</b></p><ul><li>
Pragmatic and solutions-oriented mindset</li><li>
High degree of personal accountability and ownership</li><li>
Comfortable with ambiguity and able to create structure where needed</li><li>
Strong executive presence and credibility with senior stakeholders</li><li>
Resilient and adaptable in a fast-paced, evolving environment</li></ul><p>
This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.</p><b><br>
Qualifications</b><br>
<ul><li>
15+ years of extensive hands-on experience implementing ERM and operational risk frameworks at a large multinational financial institution, payments company or a consulting firm where you have implemented such frameworks</li><li>
Proven track record of successfully embedding risk frameworks into business operations&mdash;you've done this before and can demonstrate impact</li><li>
Deep practical knowledge of third-party risk management and regulatory compliance in financial services</li><li>
Experience working in or with payments, banking, or financial services regulatory environments</li><li>
Advanced degree (MBA, Master's) or professional certifications (FRM, PRM, CFA) required</li></ul><p>
Critical Skills &amp; Attributes</p><ul><li>
Entrepreneurial self-starter - You take initiative, identify gaps, and drive solutions without waiting to be told</li><li>
Hands-on implementation expert - You roll up your sleeves and get into the details&mdash;this isn't a purely strategic role</li><li>
Outstanding collaboration skills - You build strong relationships across functions and geographies, influencing without authority</li><li>
Exceptional communicator - Superior written and verbal communication skills with ability to articulate complex risk concepts clearly to diverse audiences</li><li>
Strong leadership abilities - Proven team leader who can inspire, develop, and manage high-performing risk professionals</li><li>
Business acumen - You understand how to balance risk management with business objectives and operational realities</li><li>
Change management capability - Experience driving organizational change and adoption of new frameworks and processes</li></ul><p>
Personal Characteristics</p><ul><li>
Pragmatic and solutions-oriented mindset</li><li>
High degree of personal accountability and ownership</li><li>
Comfortable with ambiguity and able to create structure where needed</li><li>
Strong executive presence and credibility with senior stakeholders</li><li>
Resilient and adaptable in a fast-paced, evolving environment</li></ul><br>
<b>
Additional Information</b><p><br>
Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.</p></div>

Senior Director - Head of Corporate Risk CEMEA

<p><strong>Enterprise &amp; Operational Risk Management</strong></p> <ul> <li>Implement and embed the Enterprise Risk Management (ERM) framework across the region, ensuring it becomes an integral part of how the business operates</li> <li>Drive the adoption and operationalization of the Operational Risk Framework, making risk identification, assessment, and mitigation a natural part business</li> <li>Partner with business teams across all functions to define in-scope processes for Risk and Control Self-Assessments (RCSA), ensuring comprehensive coverage of key operational activities</li> <li>Guide and enable business teams to complete RCSAs effectively, providing hands-on support, training, and quality assurance throughout the assessment process</li> <li>Drive consistent use of risk and issue logging system (GORO) across the region, ensuring data quality and completeness</li> <li>Establish processes that translate logged risks and issues into actionable management insights, driving awareness and appropriate response at all levels</li> <li>Work with business owners to develop and track risk mitigation plans, ensuring accountability and progress monitoring</li> <li>Develop comprehensive risk reporting that provides clear insights for senior management decision-making, highlighting trends, concentrations, and areas requiring attention</li> <li>Foster a culture where business teams view RCSA and risk assessment as valuable tools for their own operations, not just compliance exercises</li> <li>Collaborate with risk teams across other sub-regions to identify emerging risks and share best practices</li> </ul> <p><strong>Third-Party Risk Management</strong></p> <ul> <li>Own end-to-end third-party lifecycle management including due diligence, onboarding approvals, and ongoing monitoring</li> <li>Embed robust vendor risk assessment processes that balance thoroughness with business agility</li> <li>Ensure third-party risks are properly identified, measured, and mitigated throughout the vendor relationship</li> <li>Collaborate with global third-party risk teams on projects and initiatives, ensuring regional alignment while addressing local requirements</li> <li>Embed and disseminate global best practices in third-party risk management across the region, adapting them appropriately for local context</li> <li>Provide timely reporting and escalation of significant third-party risks to management and risk committees</li> <li>Contribute regional insights and lessons learned to global third-party risk frameworks and standards</li> </ul> <p><strong>Supervisory Risk Management</strong></p> <ul> <li>Partner closely with Legal, Country Management, Government Engagement and Compliance teams to ensure all regulatory requirements and changes are thoroughly understood and implemented flawlessly and on time</li> <li>Translate regulatory requirements into practical business changes and control enhancements</li> <li>Maintain deep understanding of the regional regulatory landscape affecting payments operations</li> <li>Work closely with global regulatory and supervisory risk teams on cross-border projects and initiatives to ensure consistent approaches</li> <li>Adopt and disseminate global regulatory best practices while ensuring they are appropriately tailored to regional supervisory expectations</li> <li>Establish robust processes for timely reporting and escalation of regulatory risks, breaches, and supervisory matters to management and risk committees</li> <li>Ensure proactive communication with global teams regarding emerging regulatory changes and their potential regional impact</li> </ul> <p><strong>Risk Governance &amp; Committee Management</strong></p> <ul> <li>Lead and facilitate the regional risk committee, ensuring it serves as an effective forum for surfacing and discussing key risks with senior management</li> <li>Drive consistent governance standards, frameworks, and reporting templates across all sub-regional risk committees to ensure quality and comparability</li> <li>Ensure local and sub-regional risks are adequately identified, discussed, and documented in sub-regional risk committees with appropriate rigor and accountability</li> <li>Establish clear escalation protocols and criteria to ensure material risks from sub-regional committees are escalated to the regional risk committee on a timely basis</li> <li>Develop high-quality, insightful content and materials that drive meaningful management discussions and decision-making at both regional and sub-regional levels</li> <li>Create a committee environment that encourages balanced, constructive conversations about risk appetite, emerging threats, and mitigation strategies</li> <li>Ensure risk committees highlight critical risks to the business in a clear, actionable manner that prompts appropriate management attention and response</li> <li>Drive accountability for risk decisions and follow-up actions identified in committee discussions across all levels</li> </ul> <p><strong>Critical Skills &amp; Attributes</strong></p> <ul> <li><strong>Entrepreneurial self-starter -</strong> You take initiative, identify gaps, and drive solutions without waiting to be told</li> <li><strong>Hands-on implementation expert</strong> - You roll up your sleeves and get into the details this isn't a purely strategic role</li> <li><strong>Outstanding collaboration skills</strong> - You build strong relationships across functions and geographies, influencing without authority</li> <li><strong>Exceptional communicator</strong> - Superior written and verbal communication skills with ability to articulate complex risk concepts clearly to diverse audiences</li> <li><strong>Strong leadership abilities</strong> - Proven team leader who can inspire, develop, and manage high-performing risk professionals</li> <li><strong>Business acumen</strong> - You understand how to balance risk management with business objectives and operational realities</li> <li><strong>Change management capability</strong> - Experience driving organizational change and adoption of new frameworks and processes</li> </ul>

Sumitomo Group

<div><p>SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG&rsquo;s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.</p><p></p><p><br>
In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization&rsquo;s extensive global network. The Group&rsquo;s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.</p><p></p><p><br>
The anticipated salary range for this role is between $190,000.00 and $210,000.00. The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual discretionary incentive award. In addition to cash compensation, SMBC offers a competitive portfolio of benefits to its employees.</p><div><div><div><h2 class="jobSectionHeader"><b>
Role Description</b></h2></div><div><p>
SMBC is seeking a strategic and experienced Director of Vendor Management to lead third-party vendor oversight for the Cash Management business. This role is critical in ensuring that vendor relationships align with business goals, regulatory requirements, and risk management standards. The ideal candidate will bring deep expertise in vendor governance, contract negotiation, performance monitoring, and cross-functional collaboration.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Role Objectives: Delivery</b></h2></div><div><p>
Vendor Strategy &amp; Governance</p><p>
- Develop and implement a comprehensive vendor management strategy for the Cash Management business. - Establish governance frameworks to ensure compliance with internal policies and regulatory requirements. - Serve as the primary point of contact for all third-party vendors supporting Cash Management services.</p><p>
Relationship Management</p><p>
- Build and maintain strong relationships with key vendors to ensure service quality, innovation, and value delivery. - Facilitate regular performance reviews, business reviews, and strategic planning sessions with vendors.</p><p>
Contract &amp; Risk Management</p><p>
- Lead contract negotiations, renewals, and amendments in collaboration with Legal, Compliance, and Procurement teams. - Monitor vendor risk, including operational, financial, and reputational risks, and implement mitigation strategies. - Ensure vendors meet service level agreements (SLAs), key performance indicators (KPIs), and regulatory obligations.</p><p>
Cross-Functional Collaboration</p><p>
- Partner with internal stakeholders including Technology, Operations, Risk, Compliance, and Finance to align vendor services with business needs. - Support audits, regulatory exams, and internal reporting related to vendor oversight.</p><p>
Continuous Improvement</p><p>
- Identify opportunities for cost optimization, process improvement, and innovation through vendor partnerships. - Stay abreast of industry trends, regulatory changes, and best practices in vendor management and cash management services.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Qualifications and Skills</b></h2></div><div><p>
- Bachelor&rsquo;s degree in Business, Finance, Supply Chain, or related field; MBA or relevant certification (e.g., CTP, CPM, CRVPM) preferred. - 10+ years of experience in vendor management, procurement, or third-party risk management, preferably within financial services. - Strong understanding of cash management products and services. - Proven experience in contract negotiation, vendor performance management, and regulatory compliance. - Excellent communication, negotiation, and stakeholder management skills. - Ability to lead cross-functional initiatives and drive strategic outcomes.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Additional Requirements</b></h2></div></div></div><div></div><p>
SMBC&rsquo;s employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.</p><p></p><p><br>
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.</p></div>

Vendor Management Director

Search 10000+ Third party risk manager jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 third party risk manager jobs NEAR_ME

Business Analyst/ Lead Business Analyst

Senior Risk & Assurance Analyst

Sourcing/Commodity Mgr

Outsourcing Manager

Senior Director - Head of Corporate Risk CEMEA

Senior Director - Head of Corporate Risk CEMEA

Vendor Management Director