TPRM Risk Management

Description:

Job Description

A pan risk type third-party risk profile for Technology & Operations (T&O)

A consistent RCSA approach for TPRM across T&O with an initial set of metrics and CSTs /KCIs and KRIs for TPR including a country cascade

End-to-end lifecycle management of T&O third-party contracts (vendor, non-vendor, and IGA)

Consistent reporting across key controls such in Security, Resilience, Third Party, Data and others as deemed necessary

A defined pan risk type RACI to support the risk profile

Creation and socialisation of T&O TPR governance forum to support oversight of T&O TPRM risk profile

Reporting of T&O TRPM Risk profile to risk governance forum such as GTPRMC and T&O NFRC) including exceptions and control breach reporting