150 Third Party Risk jobs in the Philippines
Third Party Risk Manager
Posted 9 days ago
Job Viewed
Job Description
The **Manager, Third Party Risk will** report to the Director, Third Party Risk and be responsible for assisting in the delivery of a comprehensive Third-Party Risk Management program across Manulife. The manager role will be part of the second line of defense and will actively contribute to and participate in the global intake process of third parties.
**Key Responsibilities:**
+ Assist in developing and maintaining the global Third-Party Risk Management Framework and related processes under the Director's guidance.
+ Oversee and challenge third-party contract reviews and compliance to mitigate risks.
+ Ensure alignment of third-party agreements with risk policies and standards.
+ Provide expert consultation and insights to audit and the first line of defense.
+ Contribute to the standardization and automation of third-party assessment processes.
+ Support ongoing risk assessments for key third parties and aid in action plan development.
+ Help maintain the Third-Party risk and control register.
+ Investigate incidents involving third parties to identify systemic weaknesses and corrective actions.
+ Consolidate and report Key Risk Indicators and metrics for enterprise-level risk reporting.
+ Promote a culture of Third-Party Risk Management across the organization.
+ Collaborate with various teams to integrate third-party risk exposures.
+ Assist in developing materials and presentations.
**Required Qualifications:**
+ 3-7 years of experience in Third-Party Management.
+ Experience in developing and implementing third-party risk management policies and controls in a multinational financial institution.
+ Experience with third-party risk and performance assessments.
+ Proven track record in process improvement and design.
+ Strong leadership ability and capability to work independently.
+ Excellent communication skills, both oral and written, with strong presentation and facilitation abilities across all organizational levels.
+ Innovative problem-solving skills, with the ability to assess risks in a dynamic environment.
+ Strong interpersonal, influence, and negotiation skills.
+ Results-oriented, able to manage multiple priorities and meet tight deadlines.
+ Strong time management and organizational skills.
**_When you join our team:_**
+ We'll empower you to learn and grow the career you want.
+ We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
+ As part of our global team, we'll support you in shaping the future you want to see.
**Acerca de Manulife y John Hancock**
Manulife Financial Corporation es un importante proveedor internacional de servicios financieros que ayuda a las personas a tomar decisiones de una manera más fácil y a vivir mejor. Para obtener más información acerca de nosotros, visite .
**Manulife es un empleador que ofrece igualdad de oportunidades**
En Manulife/John Hancock, valoramos nuestra diversidad. Nos esforzamos por atraer, formar y retener una fuerza laboral tan diversa como los clientes a los que prestamos servicios, y para fomentar un entorno laboral inclusivo en el que se aprovechen las fortalezas de las culturas y las personas. Estamos comprometidos con la equidad en las contrataciones, la retención de talento, el ascenso y la remuneración, y administramos todas nuestras prácticas y programas sin discriminación por motivos de raza, ascendencia, lugar de origen, color, origen étnico, ciudadanía, religión o creencias religiosas, credo, sexo (incluyendo el embarazo y las afecciones relacionadas con este), orientación sexual, características genéticas, condición de veterano, identidad de género, expresión de género, edad, estado civil, estatus familiar, discapacidad, o cualquier otro aspecto protegido por la ley vigente.
Nuestra prioridad es eliminar las barreras para garantizar la igualdad de acceso al empleo. Un representante de Recursos Humanos trabajará con los solicitantes que requieran una adaptación razonable durante el proceso de solicitud. Toda la información que se haya compartido durante el proceso de solicitud de adaptación se almacenará y utilizará de manera congruente con las leyes y las políticas de Manulife/John Hancock correspondientes. Para solicitar una adaptación razonable en el proceso de solicitud, envíenos un mensaje a .
**Modalidades de Trabajo**
Híbrido
Third Party Risk Management Analyst
Posted today
Job Viewed
Job Description
Location: Sta. Rosa Laguna (Old National Highway Tagapo)
Employment Type: Full-Time
Job Overview
Join our Third Party Security (TPS) team and play a critical role in protecting organizational assets by identifying, assessing, and mitigating security risks associated with third-party vendors. You will be embedded at a supplier location, supporting business operations by conducting continuous security assessments and ensuring compliance with industry standards and regulations.
Key Responsibilities
- Conduct regular reviews and assessments of physical and logical security controls at secured workspaces.
- Identify risks and vulnerabilities in the security infrastructure and ensure protection of sensitive customer information.
- Develop and execute test procedures to evaluate the effectiveness of security controls.
- Monitor event/security logs and user sessions for anomalies.
- Report findings to stakeholders and follow up on remediation and closure.
- Collaborate with leadership, suppliers, and business units to address security concerns.
- Establish and communicate cybersecurity standards, policies, procedures, and testing protocols.
- Investigate reported violations and potential security breaches.
- Provide technical and analytical support to resolve complex security issues.
- Drive the Supplier Information Security Program to assess and improve supplier security posture.
Qualifications
Minimum Requirements:
- Bachelor's degree or equivalent work experience.
- At least 4 years of experience in Physical Security, Information Security, Cybersecurity, or related fields.
- Minimum 3 years of experience in IT network security, risk management, vulnerability assessment, or security investigations.
Preferred Qualifications:
- Professional certifications such as Security+, CISSP, CISA, CISM, CFE, or CEH.
- Experience with frameworks like PCI DSS, ISO standards, ITIL, or COBIT.
- Background in ethical hacking, forensic investigations, and secure coding principles.
- Strong understanding of cybersecurity risk management and control standards.
- Experience in global operations, offshoring, or outsourcing environments.
- Proven ability to communicate with senior executives and technical teams.
- Participation in security conferences, forums, or technical publications is a plus.
What We're Looking For
You're a self-starter who thrives in dynamic environments. You understand the importance of information security and are passionate about protecting data and systems. You're analytical, detail-oriented, and confident in communicating complex security issues to diverse audiences.
Third-Party Risk Management Consultant
Posted today
Job Viewed
Job Description
Job Description:
We are seeking a motivated professional with a background in Risk Management to join our client's team. This role focuses on the Third-Party Risk Management (TPRM) lifecycle, with opportunities to work on global risk frameworks, information security practices, and compliance standards.
Qualifications:
- 1–2+ years of demonstrated experience in Risk Management, preferably within the Third-Party engagement lifecycle (pre-contracting, contracting, and post-contracting)
- Basic understanding of TPRM framework, Risk Management, and Information Security practices
- Exposure to Contract Risk Reviews is an advantage
- Experience with TPRM tools and technology solutions (e.g., GRC enablement solutions such as Process Unity, Prevalent, Archer, ServiceNow, etc.)
- Basic knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI-DSS, HITRUST, etc.
- Basic knowledge of privacy regulations (GDPR, CCPA, etc.)
- Basic knowledge of regulations such as FISMA, HIPAA, Reg SCI, MAS, etc.
- Foundational knowledge of TCP/IP, OSI layer and protocols, networking and security concepts, physical & environmental security, asset security, and identity & access management
Work Setup & Schedule:
- Hybrid Set up (2 Onsite and 3 days WFH weekly)
- Dayshift & Nightshift
Job Type: Full-time
Pay: Up to Php49,000.00 per month
Willingness to travel:
- 50% (Preferred)
Work Location: In person
Third-Party Risk Management Consultant
Posted today
Job Viewed
Job Description
Work Set-up: Hybrid (2 days RTO per week)
Location: Mckinley West, Taguig
Schedule: Day Shift & Night Shift (priority: 2-night shifts per week)
Start Date: ASAP
About the Role:
We are looking for a motivated Third-Party Risk Management (TPRM) Analyst to join our growing team. This role is ideal for individuals with a background in risk management, information security, and third-party lifecycle management. You will support risk assessments, contract reviews, and governance processes while working with global teams in a hybrid setup.
Qualifications:
- 1–2+ years of demonstrated experience in Risk Management, preferably in Third-Party Risk Management.
- Basic understanding of TPRM framework, Risk Management, and Information Security practices.
- Exposure to contract risk reviews (good to have).
- Familiarity with TPRM tools / GRC enablement solutions (e.g., Process Unity, Prevalent, Archer, ServiceNow).
- Basic knowledge of security and compliance standards (ISO 27001/2, ISO 22301, ISO 27018, PCI DSS, HITRUST, etc.).
- Awareness of privacy regulations (GDPR, CCPA) and key industry regulations (FISMA, HIPAA, Reg SCI, MAS).
- Basic technical understanding of TCP/IP, OSI layers, networking & security concepts, Physical & Environmental Security, Asset Security, and Identity & Access Management.
Job Type: Full-time
Pay: Php35, Php49,000.00 per month
Benefits:
- Company events
- Health insurance
- Opportunities for promotion
- Promotion to permanent employee
- Work from home
Work Location: In person
Third Party Risk Management Officer
Posted today
Job Viewed
Job Description
Purpose of the Role
As the OE TPRM function or equivalent, you shall locally adopt, maintain, and monitor effective implementation of TPRM framework. You shall cooperate with the existing outsourcing function with respect to Outsourcing Arrangements and support the Business Owners.
Responsibilities of the Role
Ensure the requirements of the Third-Party Risk Management (TPRM) Standard are fulfilled, communicated, and applied to stakeholders and business owners. Govern and monitor the effective implementation of the TPRM framework, integrating it into the Non-Financial Risk Management framework.
Support business owners in carrying out the TPRM lifecycle, including risk assessments and ongoing monitoring of Third-Party Arrangements. Establish mechanisms for obtaining management information and reporting processes to adhere to monitoring requirements.
Involve relevant functions across the lifecycle process, including third-party onboarding, contract management, risk evaluation, due diligence, subcontractor risk assessment, and concentration risk evaluation. Ensure collaboration with OE Procurement and Legal Functions during negotiations and agreement drafting.
Conduct training and awareness programs for OE local Board of Management and business owners, emphasizing the TPRM lifecycle, roles, obligations, and local specificities. Ensure business owners are aware of their responsibilities and the involvement of other relevant functions.
Document each step of the TPRM process and ensure accurate and complete information in the TPRM inventory. Provide management reports on the status of OE TPRM, inform the OE Board of Management and Group TPRM Function on risk assessments, control effectiveness, and investment needs, and report to supervisory authorities within stipulated timelines.
Requirements for the Role
- Educational Background: Bachelor's degree in Risk Management, Business Administration, Finance, Law, or a related field. A master's degree or professional certification in risk management or a related field would be advantageous.
- Proven experience in third-party risk management, outsourcing, or procurement functions, preferably within the insurance or financial services industry.
- Experience in governance and monitoring of risk management frameworks, including integration into broader risk management systems.
- Experience in governance and monitoring of risk management frameworks, including integration into broader risk management systems.
- Strong understanding of third-party risk management standards and frameworks, including the ability to apply these in practical settings.
- Strong analytical skills to evaluate risk relevance, perform risk assessments, and assess control effectiveness.
- Ability to create, analyze, and present management reports on risk status and control effectiveness.
- Experience in developing management information systems for ongoing monitoring requirements.
- Excellent communication skills to effectively convey TPRM requirements and processes to stakeholders, business owners, and the Board of Management.
- Ability to collaborate with cross-functional teams, including Procurement and Legal functions, and manage negotiations and contract drafting.
- Strong organizational skills to document and manage the TPRM process, including maintaining accurate records in the TPRM inventory.
- Ability to manage multiple projects and prioritize tasks effectively, ensuring timely completion of risk management activities.
- Experience in designing and conducting training and awareness programs for business owners and management teams.
- Ability to upskill and retain expertise necessary for supervising third-party arrangements and managing associated risks.
- Knowledge of regulatory requirements and timelines for reporting and notification to supervisory authorities, ensuring compliance with all relevant regulations.
- Experience with AI-driven adaptive learning technologies and data analysis for personalized training.
- Proficiency in using AI tools for content recommendation, automated assessment, and feedback.
External Footer
Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.
At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.
We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.
Join us. Let's care for tomorrow.
Job Types: Full-time, Temporary
Contract length: 6 months
Education:
- Bachelor's (Preferred)
Work Location: Hybrid remote in Makati
Third Party Risk Senior Analyst
Posted today
Job Viewed
Job Description
Are you ready to make an impact at DTCC?
Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.
Our Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.
Pay and Benefits:
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
- DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).
The Impact you will have in this role:
Operation Risk Management, ORM establishes protocols for analying, reporting, escalating, and mitigating operational risks. ORM works with management and support functions to help them manage their operational risk exposures. Third Party Risk (TPR) establishes the Third Party Risk Management framework for the organization. TPR identifies, assesses and mitigates the risks that Third Parties pose to the organization through risk assessments, due diligence reviews, and implementation of ongoing monitoring requirements for Critical and High-rated Third Parties.
Your Primary Responsibilities:
- Complete team and department goals, and the tracking of key metrics used for management reporting of Third Party risk key processes while working at understanding and mastering knowledge of process.
- Collect assurance documentation from our third parties/vendors (e.g. policies and procedures, Standard Information Gathering (SIG), SOC, ISO, etc.).
- Following up with appropriate SMEs and customers for any questions or concerns to close out the risk assessment within our established SLAs.
- Ability to make suggestions for operational improvements.
- Produce and maintain reporting and metrics for both internal and external customers. Analyze, interpret, and communicate trends or patterns through dashboards, and make suggestions for improvements as needed.
- Possess strong knowledge of processes within role. Ability to develop knowledge across functional areas within the team.
- Build strong relationships with internal and external customers. Support Third Party Risk activities and collaborate to enhance processes.
- Demonstrate effective written and verbal communication skills and active engagement in meetings. Provide guidance to internal customers on processes and address issues and inquiries timely.
- Aligns risk and control processes into day to day responsibilities to monitor and mitigate risk; advances appropriatel
Preferred Qualifications:
- Minimum of 2 years of IT Risk or Audit related experience
- Bachelor's degree preferred or equivalent experience
- Proficient in Microsoft Excel, Word, PowerPoint and SharePoint
- Strong analytical and communication skills
- Excellent organizational skills coupled with ability to be versatile and flexible to meet business needs
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
With over 50 years of experience, DTCC is the premier post-trade market infrastructure for the global financial services industry. From 20 locations around the world, DTCC, through its subsidiaries, automates, centralizes, and standardizes the processing of financial transactions, mitigating risk, increasing transparency, enhancing performance and driving efficiency for thousands of broker/dealers, custodian banks and asset managers. Industry owned and governed, the firm innovates purposefully, simplifying the complexities of clearing, settlement, asset servicing, transaction processing, trade reporting and data services across asset classes, bringing enhanced resilience and soundness to existing financial markets while advancing the digital asset ecosystem. In 2024, DTCC's subsidiaries processed securities transactions valued at U.S. $3.7 quadrillion and its depository subsidiary provided custody and asset servicing for securities issues from over 150 countries and territories valued at U.S. $99 trillion. DTCC's Global Trade Repository service, through locally registered, licensed, or approved trade repositories, processes more than 25 billion messages annually. To learn more, please visit us at or connect with us on LinkedIn, X, YouTube, Facebook and Instagram.
DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you'll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It's the chance to make a difference at a company that's truly one of a kind.
Learn more about Clearance and Settlement by clicking here.
Third Party Risk Senior Analyst
Posted today
Job Viewed
Job Description
Are you ready to make an impact at DTCC?
Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.
Our Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.
Pay And Benefits
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
- DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).
The Impact You Will Have In This Role
Operation Risk Management, ORM establishes protocols for analying, reporting, escalating, and mitigating operational risks. ORM works with management and support functions to help them manage their operational risk exposures. Third Party Risk (TPR) establishes the Third Party Risk Management framework for the organization. TPR identifies, assesses and mitigates the risks that Third Parties pose to the organization through risk assessments, due diligence reviews, and implementation of ongoing monitoring requirements for Critical and High-rated Third Parties.
Your Primary Responsibilities
- Complete team and department goals, and the tracking of key metrics used for management reporting of Third Party risk key processes while working at understanding and mastering knowledge of process.
- Collect assurance documentation from our third parties/vendors (e.g. policies and procedures, Standard Information Gathering (SIG), SOC, ISO, etc.).
- Following up with appropriate SMEs and customers for any questions or concerns to close out the risk assessment within our established SLAs.
- Ability to make suggestions for operational improvements.
- Produce and maintain reporting and metrics for both internal and external customers. Analyze, interpret, and communicate trends or patterns through dashboards, and make suggestions for improvements as needed.
- Possess strong knowledge of processes within role. Ability to develop knowledge across functional areas within the team.
- Build strong relationships with internal and external customers. Support Third Party Risk activities and collaborate to enhance processes.
- Demonstrate effective written and verbal communication skills and active engagement in meetings. Provide guidance to internal customers on processes and address issues and inquiries timely.
- Aligns risk and control processes into day to day responsibilities to monitor and mitigate risk; advances appropriatel
Preferred Qualifications
- Minimum of 2 years of IT Risk or Audit related experience
- Bachelor's degree preferred or equivalent experience
- Proficient in Microsoft Excel, Word, PowerPoint and SharePoint
- Strong analytical and communication skills
- Excellent organizational skills coupled with ability to be versatile and flexible to meet business needs
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Be The First To Know
About the latest Third party risk Jobs in Philippines !
DWS - Third Party Risk Management Specialist - Associate
Posted today
Job Viewed
Job Description
Position Overview
Employer:
DWS Group
Job Title:
Third Party Risk Management Associate
Location:
Manila
About DWS:
Today, markets face a whole new set of pressures – but also a whole lot of opportunity too. Opportunity to innovate differently. Opportunity to invest responsibly. And opportunity to make change.
Join us at DWS, and you can be part of an industry-leading firm with a global presence. You can lead ambitious opportunities and shape the future of investing. You can support our clients, local communities, and the environment.
We're looking for creative thinkers and innovators to join us as the world continues to transform. As whole markets change, one thing remains clear; our people always work together to capture the opportunities of tomorrow. That's why we are 'Investors for a new now'.
As investors on behalf of our clients, it is our role to find investment solutions. Ensuring the best possible foundation for our clients' financial future. And in return, we'll give you the support and platform to develop new skills, make an impact and work alongside some of the industry's greatest thought leaders. This is your chance to achieve your goals and lead an extraordinary career.
This is your chance to invest in your future.
Read more about DWS and who we are here .
Team / Division Overview
DWS continues its journey as a publicly listed asset manager since its IPO and is in the process of establishing its own infrastructure and corporate functions, including Procurement. Both the Third-Party Management Operations and Third-Party Lifecyle Management will be fundamental pillars of DWS Procurement.
Your Responsibilities
As our Procurement Analyst - Associate, you will:
- Act as Third-Party Management process and requirements expert, working with relevant Risk SMEs and guiding the Service Relationship Owners (SRO) through the E2E process based on KOD and policy.
- Ensure that Third-Party Risk Management transactions and Third-Party Lifecycle Management attestations assigned to you are managed effectively, any issues are addressed timely and resolved in a timely manner;
- Identify opportunities for process improvements to help drive efficiencies; and
- Participate and drive projects for process improvements
We are looking for
Proven experience particularly in vendor onboarding and management processes, third-party E2E operational management from third-party onboarding to service go-live / exit or termination;
- Experience with Third-Party Risk Management platforms; Process Unity skills highly desirable;
- Excellent verbal and written communication skills for all levels of the organisation. English-fluency required;
- Ability to apply a solution-based approach to arising problems, proactively search for resolutions through cross-functional networking;
- Able to operate effectively within a global organisation working with teams across multiple entities;
- Enthusiastic and results-oriented with proven ability to deliver results; and
- Willing to work mid-shift (2:00 PM to 11:00 PM Manila time) and on hybrid set-up. Office is located in Bonifacio Global City.
What we'll offer you:
At DWS we're serious about diversity, equity and creating an inclusive culture where colleagues can be themselves and it's important to us that you enjoy coming to work - feeling healthy, happy and rewarded. At DWS you'll have access to a range of benefits including, but not limited, to the below:
A hybrid working model, allowing for in-office / work from home flexibility, comprehensive leave policy, personal and volunteer days. Competitive compensation packages including health and wellbeing benefits. Access to best in class trainings, in role development and career progression opportunities.
If you require any adjustments or changes to be made to the interview process for any reason including, or related to a disability or long-term health condition, then please contact your recruiter and let them know what assistance you may need. Examples of adjustments include providing a change to the format of the interview, or providing assistance when at the DWS office. This will not affect your application and our recruitment team will discuss options with you.
Our values define the working environment we strive to create – diverse, supportive, and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights, and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.
We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs, and generations and are committed to providing a working environment free from harassment, discrimination, and retaliation.
We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.
Source to Pay Coordinator - Third Party Risk Management
Posted 7 days ago
Job Viewed
Job Description
**Work with Us. Change the World.**
At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world's most complex challenges and build legacies for future generations.
There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.
We're one global team driven by our common purpose to deliver a better world. Join us.
**Job Description**
The role is part of the Source to Pay Team supporting the risk management of Third-Party Business Partners. The role is expected to do assigned tasks with direct supervision. Under direct supervision, the role will execute assigned tasks and collaborate closely with various teams, including Procurement, Cross-Functional Partners, Requisition to Receipt and Invoice to Pay Teams, and Accounts Payable and Receivable.
+ Analyze and review new supplier requests forms by conducting thorough investigations and background checks; verify their legitimacy and compliance
+ Coordinate with suppliers to ensure updated information is reflected in all relevant systems.
+ Communicate timely with requesting departments and relevant users to clarify needs and requirements; Document findings and provide recommendations for approval or rejection.
+ Maintain and update key contact information for both new and existing suppliers. Support the retriggering of Inherent Risk Questionnaire (IRQ) processes as needed (e.g. due to changes in key contact information).
+ Update the tracker on IRQ progress and highlight any overdue tasks and IRQs that have timed out.
+ Maintain records of IRQ monitoring activities.
+ Monitor the status of active IRQs to ensure timely processing and completion. Identify and escalate any delays or issues in the IRQ process with the support of the senior members of the team/Team Lead.
+ Support the timeout process for IRQs, ensuring that any IRQs that exceed predefined time limits are appropriately addressed by coordinating with users. Implement corrective measures to prevent future timeouts based on existing guidelines.
+ Review IRQs paused during onboarding by communicating with suppliers and internal teams to determine the cause and necessary steps to resume or cancel the onboarding. Document decisions and communicate outcomes to relevant parties
+ Support the recertification process of suppliers, ensuring compliance with organizational standards and requirements. Assist in the preparation and distribution of recertification documents. Track the status and update the recertification records in the supplier database accordingly.
+ Support Employee Center to ensure efficient communication and information flow. This includes addressing any issues with the guidance of senior members of the team and team lead.
+ Monitor and respond to queries in the Employee Center mailbox.
+ Distribute relevant information to employees as needed.
+ Organize and document all email correspondence.
+ Support and direct users to the correct procedures in managing Third Party Risk
+ Review and record all third-party data within service level agreement (SLAs) timely and accurately.
+ Perform all assigned tasks in compliance with SLA, process, policies, and procedures
**Qualifications**
+ Bachelor's degree in business or supply chain is preferred
+ 0-1 year of experience in managing Third Parties, Customer Service, or Procurement preferred
+ Basic knowledge in MS Office tools
+ Knowledge of Coupa platform and associated systems is preferred
+ Has the flexibility to work according to changes in workload and other priorities
**Additional Information**
**About AECOM**
AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options, well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.
AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients' complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle - from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2024. Learn more at aecom.com.
**What makes AECOM a great place to work**
You will be part of a global team that champions your growth and career ambitions. Work on groundbreaking projects - both in your local community and on a global scale - that are transforming our industry and shaping the future. With cutting-edge technology and a network of experts, you'll have the resources to make a real impact. Our award-winning training and development programs are designed to expand your technical expertise and leadership skills, helping you build the career you've always envisioned. Here, you'll find a welcoming workplace built on respect, collaboration and community - where you have the freedom to grow in a world of opportunity.
As an Equal Opportunity Employer, we believe in your potential and are here to help you achieve it. All your information will be kept confidential according to EEO guidelines.
**ReqID:** J
**Business Line:** Geography OH
**Business Group:** DCS
**Strategic Business Unit:** GBS
**Career Area:** Procurement & Supply Chain
**Work Location Model:** Hybrid
Non-Financial Services Third-Party Risk Management Senior Consultant
Posted today
Job Viewed
Job Description
EY GDS Consulting - Non-financial Services – Third-Party Risk Management (RSS) – Senior
As part of our EY- NFS TPRM team, you will help clients enhance their business performance by translating their strategies into realities. Working with EY-high performing teams, you will help clients to grow, innovate, protect, and optimize their business performance.
The opportunity
We're looking for Seniors with expertise in Third-Party Risk Management to join the leadership group of our EY- MS RSS team. It is a fantastic opportunity to be part of a leading firm while being instrumental in the growth of a new service offering.
Your key responsibilities
· Lead and work closely with the manager in the delivery of Third-Party Risk Management (TPRM) engagements.
· Lead the design and implementation of TPRM operating models, identifying, evaluating, and providing solutions to evaluate complex business and technology risks.
· Follow policies and procedures that support the successful implementation of TPRM operating models.
· Lead/Facilitate process walkthrough discussions to document end-to-end business processes and functional requirements.
· Assess the application of legal and regulatory requirements to clients TPRM practices.
· Lead/Participate in technology enhancement requirements such as Automation, Data Analytics, AI to support TPRM processes.
· Assist in the selection and tailoring of approaches, methods, and tools to support service offering or industry projects.
· Demonstrate a general knowledge of market trends, competitor activities, EY products, and service lines.
· Build and nurture positive working relationships with clients to achieve exceptional client service.
· Contribute to Identifying opportunities to improve engagement profitability.
· Assist leadership in driving business development initiatives and account management.
· Participate in building strong internal relationships within EY Consulting Services and with other services across the organization.
Skills and attributes for success
· Maintain an educational program to develop personal skills continually.
· Constantly upskilling as per market trends.
· Understand and follow workplace policies and procedures.
· Attend L&D programs and exhibit a thorough knowledge of consulting methodology and consulting attributes.
· Exhibit initiative and participate in corporate social and team events.
To qualify for the role, you must have
· to 8 years of demonstrated experience with Risk Management across the Third-Party engagement lifecycle (pre-contracting, contracting, and post contracting) and an understanding of the associated organizational infrastructure (e.g., relevant internal controls, business processes, governance structures).
· Strong understanding of the TPRM framework, Risk Management, Information Security practices.
· Hands-on exposure to TPRM tools and technology solutions (e.g., GRC enablement solutions, such as Process Unity, Prevalent, Archer, ServiceNow, etc.).
· Demonstrated knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI – DSS, HITRUST, etc.
· Good knowledge of privacy regulations such as GDPR, CCPA, etc.
· Good knowledge of regulations such as FISMA, HIPAA, Reg SCI, MAS, etc.
· Good knowledge of TCP/IP, concepts of OSI layer and protocols, networking and security concepts, Physical & Environmental Security, Asset Security and Identity & Access Management.
· Good knowledge of OS (Windows / Linux) security, Database security, IT infrastructure (switches, routers, firewalls, IDS, IPS, etc.), Security architecture design, and review.
· Good familiarity with OWASP, and Secure SDLC standards/frameworks, anti-virus solutions (e.g., Symantec, McAfee, etc.).
· Good experience in LAN/WAN architectures and reviews.
· Good knowledge of incident management, disaster recovery, and business continuity management, cryptography.
· Good to have prior Big-4 experience.
· Good to have certifications - CISSP, CISA, CISM, CTPRP, CIPP, ISO 27001 Lead Auditor or Lead Implementer
Ideally, you'll also have
· Project Management skills.
· Exposure to tools like ProcessUnity, ServiceNow, Archer.
What we look for
· A Team of people with enthusiasm to develop new skills and knowledge and experience to succeed and inquisitiveness to learn new things in this fast-moving environment.
· Actively tracks and communicates engagement performance and planning to EY engagement management, ensuring project milestones remain on track and are completed timely.
· Actively mentors and trains team members on Third-Party Risk Management processes, governance, and frameworks.
· Works cross-functionally with team members to support and drive a collaborative team environment.
· Creates and design effective presentations as a means for communicating project and deliverable progress to clients.
· Performs sophisticated data analyses to understand client s business and identify risk
· Executes advanced services and supervise staff in delivering essential services.
· Understands client s business environment and basic risk management approaches
· Actively participates in decision making with engagement management and seek to understand the broader impact of current decisions.
· Actively contributes to improving operational efficiency on projects & internal initiatives.
What working at EY offers
At EY, we're dedicated to helping our clients, from the startups to Fortune 500 companies — and the work we do with them is as varied as they are.
You get to work with inspiring and meaningful projects. Our focus is on education and coaching alongside practical experience to ensure your personal development. We value our employees, and you will be able to control your progress with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:
· Support, coaching, and feedback from some of the most engaging colleagues around
· Opportunities to develop new skills and progress your career
· The freedom and flexibility to handle your role in a way that's right for you
About EY
As a global leader in Assurance, Tax, Strategy & transactions and Consulting services, we're using the finance products, expertise, and systems we've developed to build a better working world. That starts with a culture
that believes in giving you the training, opportunities, and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we'll make our ambition to be the best employer by 2020 a reality.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Join us in building a better working world.
Apply now