Third Party Risk Management (TPRM) Specialist

Job description

As a Third Party Risk Management (TPRM) Specialist, you will support Asset Management's third-party risk governance framework. The role centers on assessing, monitoring, and managing risks associated with external vendors and service providers, with particular focus on operational, cyber, information security, and regulatory risks.

Core Responsibilities

1. Third-Party Risk Assessments

• Manages vendor risk assessments.
• Assesses remediation activities and compensating controls for identified findings.
• Supports ongoing risk reviews and monitoring activities across Asset Management vendors.

2. OCRA (Operational & Cyber Risk Assessment) Support

• Supporting OCRA assessments and exception processes.
• Analyzing audit and assessment findings.
• Reviewing vendor responses and evidence.
• Evaluating mitigating and compensating controls.
• Helping stakeholders understand assessment requirements and remediation expectations.
• Contributing to completion of OCRA-related deliverables within required deadlines.
• Proactive in resolving complex issues.

3. Regulatory Outsourcing Control Check (ROCC) Case Management

• Coordinates ROCC submissions and case management.
• Provides timely status updates.
• Works through complex issues and escalations.
• Helps resolve risk management cases efficiently and accurately.

4. Vendor Governance and Oversight

• Contribute to governance forums related to third-party management.
• Supports oversight of strategic vendors and fund service providers.
• Contribute to discussions regarding service quality, regulatory obligations, supplier risks, and governance enhancements.
• Assists with monitoring vendor performance, findings, and remediation efforts.