Job Responsibilities:
The Assistant Vice President, IT Third Party Risk Management (IT TPRM) assists the VP and the ASO IT TPRM team in executing the end-to-end IT third-party risk management process across the System Office of Asia (ASO). The role focuses on timely handling of IT TPRM cases, coordination with internal stakeholders and vendors, and supporting effective portfolio management and oversight of IT third parties.
This role plays a hands-on execution and coordination role within the IT TPRM operating model, ensuring that IT third-party risk assessments, reviews, and ongoing monitoring activities are completed accurately, consistently, and in line with ASO policies and regulatory expectations.
Third Party Risk Management (TPRM) – IT Focus
Support the execution of IT Third Party Risk Management processes across ASO, covering onboarding, due diligence, risk assessment, outsourcing classification, ongoing monitoring, issue tracking, and offboarding.
Handle and coordinate IT TPRM cases end-to-end, ensuring reviews are completed on time and in accordance with defined SLAs.
Perform IT third-party risk assessments, including analysis of control questionnaires, supporting evidence, and remediation plans.
Work closely with Internal IT teams, Information Security, Risk, Compliance, and Business stakeholders to clarify requirements and address gaps identified during reviews.
Track issues, findings, and remediation actions, and follow up with vendors and internal owners to ensure timely closure.
IT Third Party Vendor & Portfolio Coordination
Assist the VP in managing and maintaining a consolidated IT third-party portfolio view for ASO.
Coordinate with vendors and internal stakeholders to collect required documentation, evidence, and updates.
Support monitoring of third-party risk profiles, criticality, concentration risk, and dependency.
Assist with preparation of portfolio-level reports, metrics, and dashboards for management review.
Regulatory, Policy & Governance Support
Support compliance with local regulatory requirements, outsourcing guidelines, and internal IT TPRM policies across ASO jurisdictions.
Assist in preparing materials, evidence, and responses for regulatory reviews, audits, and management reporting.
Support maintenance and enhancement of IT TPRM policies, procedures, templates, and guidance documents.
Escalate material risks, delays, or issues in a timely manner.
Stakeholder Collaboration and Support
Act as a key point of contact for IT TPRM-related queries from ASO stakeholders.
Work closely with IT, Procurement, Risk, Compliance, and Information Security teams to ensure smooth execution of IT TPRM activities.
Contribute to continuous improvement initiatives, including process streamlining, tooling enhancements, and data quality improvements.
Support knowledge sharing and collaboration within the ASO IT TPRM team.
Required Experience & Qualifications
Minimum 6 years of experience in IT Third Party Risk Management, IT outsourcing, technology risk, operational risk, or governance functions.
Experience with IT third-party risk assessments, vendor reviews, and issue remediation tracking.
Experience working in a regulated financial institution or large multinational environment.
Exposure to regulatory expectations related to IT outsourcing and third-party risk is an advantage.
Prior experience working with regional or cross-border stakeholders is preferred.
Solid understanding of IT Third Party Risk Management and outsourcing processes
Good knowledge of technology risk, information security, and control environments
Strong coordination and follow-up skills with attention to detail
Ability to manage multiple cases and priorities in parallel
Effective written and verbal communication skills
Collaborative, proactive, and execution-focused mindset
We regret to inform that only shortlisted applicants will be notified.
(Job ID:10076241)
