Third-Party Risk Management (TPRM) Specialists

The Third-Party Risk Management (TPRM) Specialist is responsible for assessing, monitoring, and mitigating risks associated with external vendors and third-party service providers. This role plays a critical part in ensuring that vendors meet the organization's standards for security, compliance, and operational risk. The TPRM Specialist collaborates with internal teams and external partners to evaluate vendor risk across a variety of domains, including cybersecurity, data privacy, regulatory compliance, and financial stability.

Key Responsibilities :

• Conduct comprehensive risk assessments of third-party vendors during onboarding and periodically throughout the relationship lifecycle.
• Develop and manage vendor risk profiles using questionnaires, risk rating tools, and due diligence documentation.
• Evaluate vendors for compliance with regulatory requirements such as GDPR, HIPAA, SOC 2, ISO 27001, and other relevant standards.
• Work closely with Legal, Compliance, IT Security, and Procurement teams to ensure risk mitigation strategies are in place.
• Support third-party audits, SOC reviews, and on-site assessments.
• Maintain an up-to-date inventory of all third-party relationships and risk classifications.
• Monitor vendors for changes in risk status, incidents, or negative news using external tools and internal reporting mechanisms.
• Escalate high-risk findings and provide actionable recommendations to reduce exposure.
• Assist in the development and enhancement of TPRM frameworks, policies, and procedures.
• Ensure documentation and risk records are accurate and audit-ready.

Qualifications :

Preferred Skills :