Third Party Risk Management - Executive

Technical Skill Requirements

• Expertise in Third Party Risk Assessment Reporting e.g., SOC1, SOC 2, IT internal audit, Information Security/cybersecurity, IT SOX, IFC
• Relevant expertise on GDPR requirements, Data privacy and protection, ISO control, NIST Standards.
• Experience in performing vendor risk assessment, due diligence, vendor evaluations, control testing, IT / infosec risk assessments, network security, Infrastructure assessments.
• Understanding of GAAP, GAAS, COSO and Sarbanes-Oxley

Responsibilities

• Clear understanding of TPRM - Third Party Risk Management lifecycle
• Timely Supplier and Client onboarding to ensure the integration into Aptias business ecosystem while ensuring that the supplier meets our requirements, standards, and expectations.
• Conduct thorough due diligence on potential third-party vendors before entering into contracts or partnerships, assessing their financial stability, regulatory compliance, performance history, and security posture.
• Collaborating with the US and UK legal teams to review and negotiate contracts with third-party vendors, ensuring that they include adequate provisions for risk mitigation, compliance, data security, and performance standards.
• Possess advanced knowledge of GDPR requirements, IT practices, risk assessment practices, change control, data privacy, and business continuity. Ensuring that all third-party relationships comply with relevant laws, regulations, and industry standards, such as GDPR, HIPAA, or PCI DSS.
• Regularly communicating with internal stakeholders, regarding the status of third-party relationships and associated risks.
• Interpret the details from the SOC, ISO reports and annual report/financial statements.
• Building and maintaining strong relationships with clients and third-party vendors based on transparency, communication, and mutual trust. This includes conducting regular meetings, performance reviews, and addressing any concerns or issues promptly.
• Strong attention to detail with an analytical mind and outstanding problem-solving skills.

Required Qualification: MBA, CA, CA (Inter), ICWA, Any Graduate

Certification: CTPRP, IRM (Level 1, 2 & 3), CISA, CISSP, ISO, NIST