TPRM Analyst

Job Requirements

About the Role

The Third-Party Risk Management (TPRM) Analyst will play a key role in implementing and maintaining the Vendor Risk Management framework within the bank’s Enterprise Risk Management function. The role involves ensuring compliance with internal and regulatory requirements, maintaining accurate vendor data and contracts, and supporting various stakeholders with timely information and reporting. The analyst will also contribute to system implementation and process improvements to enhance operational efficiency and risk oversight.

Key Responsibilities

Primary Responsibilities

• Implement and ensure compliance with the Vendor Risk Management framework across business units.
• Validate adherence to third-party risk management requirements, including risk assessments, reviews, and mandatory contractual clauses.
• Build and maintain a comprehensive vendor database and provide relevant data to stakeholders as needed.
• Coordinate and ensure availability of vendor contracts.
• Track open issues related to the framework or vendors, especially those not monitored separately.
• Prepare MIS reports and data submissions for management and regulatory bodies.
  
  

• Support stakeholder requirements including Audit, Compliance, Legal, Business Continuity Management (BCM), Information Security Group (ISG), and Accounts Payable (AP).
• Conduct User Acceptance Testing (UAT) during system implementations.
  
  

• Graduation: Required
• Post-graduation: Preferred
• Professional Qualification/Certification (e.g., CA, CFA, ICWA): Preferred
  
  

• Up to 6 years of relevant experience in risk management, vendor governance, or related domains.
  
  

• Strong understanding of risk and compliance frameworks.
• Attention to detail and ability to manage large datasets.
• Effective communication and stakeholder management skills.
• Ability to work collaboratively across departments.
• Proficiency in preparing reports and MIS for internal and external use.
• Experience in system testing and implementation support.