The Role
Lead the enterprise Third-Party Risk Management governance framework, including policy design, vendor risk assessments, risk-tiered inventory, due diligence, continuous monitoring, remediation, SLA oversight, and executive reporting. Assess financial, legal, information security, operational, regulatory, and reputational risks across vendors. Ensure regulatory alignment, maintain risk registers and governance documentation, and present dashboards and exception reports to senior leadership, the Risk Management Committee, and the Board.
Summary Generated by Built In
Employment Type: Full-Time
Role Overview
The Senior Manager/Manager – TPRM Governance will lead the strategic design, operationalization, and ongoing oversight of the enterprise-wide Third-Party Risk Management framework.
This role is responsible for identifying, assessing, monitoring, and mitigating third-party risks across all vendors, suppliers, and partners.
The person will champion the TPRM framework as aligned to applicable compliances across regulations and statutory mandates—while serving as the primary bridge between cross-functional business units, executive leadership, internal and external stakeholders.
Key Responsibilities
TPRM Framework & Policy Governance
Establish robust governance mechanisms and the end-to-end design for formulating, executing, and enhancing TPRM control frameworks, policies, and standard operating procedures.
Ensure enterprise-wide adoption of third-party risk methodologies, aligning with applicable regulatory requirements.
Drive a data-driven risk-based approach to 3rd party evaluation, exception identification, and reporting.
Design, consolidate, and present executive TPRM dashboards, trend analyses, and exception reports directly to the Risk Management Committee, Board of Directors, and Senior leadership.
Third-Party Risk Assessment
Perform inherent and residual risk assessments, monitor SLA adherence, performance metrics, and control effectiveness across the vendor lifecycle.
Lead and oversee continuous vendor risk evaluations across multiple domains, including financial health, information security, operational resilience, legal, compliance, and reputational risk.
Maintain and govern a centralized, risk-tiered vendor inventory categorizing third parties based on service nature, data access, regulatory criticality, and concentration risk.
Define periodic due diligence and monitoring frequencies aligned with organizational risk appetite and regulatory standards.
Lead the ongoing monitoring strategy for critical third parties, utilizing SLA performance tracking, continuous financial health reviews, threat intelligence feeds, and regulatory sanction screening.
Manage and orchestrate structured, periodic vendor risk questionnaire assessments and remediation programs as defined under the TPRM framework.
Track vendor incidents, operational control failures, and risk events to drive remediation, while maintaining up-to-date policies, SOPs, risk registers, and governance reporting.
Required Skills & Competencies:-
Industry Expertise: 6+ years of domain experience in Third-Party Risk Management, including Outsourcing Risk, Vendor Evaluation, Operational Risk, or Risk Governance within BFSI, FinTech, or a regulated environment.
Regulatory Frameworks: Deep understanding of regulatory guidelines on Third-Party Governance standards.
Vendor & Operational Oversight: Demonstrated expertise in 3rd Party due diligence, SLA governance, regulatory compliances, and audit support for key third parties
Multi-Domain Risk Evaluation: Proven capability to assess complex, multi-domain vendor risk scenarios across legal, financial, cyber, operational, and regulatory vectors.
Analytical & Data-Driven Mindset: Strong expertise in risk scoring models, trend analysis, exception tracking, and executive dashboarding.
Qualifications & Experience
Education: Bachelor’s or Master’s degree in Risk Management, Finance, Commerce, Law, Information Security, or a related discipline.
Certifications: Professional certifications in Risk Management or Information Security (e.g., ISO 27001 Lead Auditor, CISA, CRISC, or CERA) are preferred.
Skills Required
- 6+ years of experience in Third-Party Risk Management, outsourcing risk, vendor evaluation, operational risk, or risk governance
- Experience within BFSI, FinTech, or another regulated environment
- Deep understanding of regulatory guidelines for third-party governance
- Expertise in third-party due diligence, SLA governance, regulatory compliance, and audit support
- Ability to assess vendor risks across legal, financial, cybersecurity, operational, and regulatory domains
- Expertise in risk scoring models, trend analysis, exception tracking, and executive dashboards
- Bachelor’s or master’s degree in Risk Management, Finance, Commerce, Law, Information Security, or a related discipline
- Professional certification in Risk Management or Information Security, such as ISO 27001 Lead Auditor, CISA, CRISC, or CERA
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Paytm started the Digital Revolution in India. And we went on to become India’s leading Payments App. Today, more than 20 Million merchants & businesses are powered by Paytm to Accept Payments digitally. This is because more than 300 million Indians use Paytm to Pay at their stores. And that’s not all, Paytm App is used to Pay bills, do Recharges, Send money to friends & family, Book movies & travel tickets. With innovations to Financial services & products in pipeline, this is but one of the milestones achieved towards our mission – to bring 500 million unserved and underserved Indians to the mainstream economy.
