Job Purpose
Responsible for developing, implementing and ongoing governance of Third-Party Risk Management (TPRM) organizations Program Governance and Quality Assurance functions. This includes but not limited to:
- Standard repeatable process to generate risk-based reporting and analytics.
- Maintain quality assurance and ensure compliance with TPRM program policy and standards.
- Provide guidance, assistance in on-going training and awareness activities across the enterprise.
- Support and assist with all internal and external audit/exam related inquiries.
- Develop and maintain interdepartmental relationships with business partners.
Responsibilities
- Directs and drives the third-party risk management program
- Leads the development of strategic third-party risk management plan
- Supports internal stakeholders prior to onboarding and throughout the third-party life cycle
- Conduct foundational assessments of new third parties prior to engaging in a contractual relationship
- Assists and analyzes third party risk, and evaluates third party service providers
- Assists in oversight, reporting, and annual evaluations
- Determines infrastructure improvements to drive reductions in run rate savings without compromising business strategy
- Gains understanding of complex supplier pricing models, develop cost analysis, scorecards, and division vendor reports, and helps conduct quarterly business reviews
- Procures services and materials as directed by and approved through internal channels and policy
- Assists in the sourcing and operational negotiations and third-party risk reviews as needed
- Supports contract development, third party risk reviews, and approval process and provides contract information as needed
- Develops and applies standardized and rigorous approach to financial analysis
- Develops, implements, monitors, and reports performance measures that demonstrate value and ensure vendor performance
- Conducts reviews which measure end-user satisfaction, spend and usage trends (historical and projected), prices, quality and service levels, savings, supplier performance metrics, next-generation improvement opportunities, etc.
- Participates in stakeholder interviews to gather information regarding current practices, processes, and behaviors
- Maintain awareness of emerging trends for services provided by various third parties
- Support ongoing training awareness of industry trends and other related duties
- Participates and collaborates in Risk team projects both internally and outside of the department
- Performs other related duties as assigned
- May require occasional domestic or international travel as needed
Qualifications
- Bachelor’s degree in Business Administration, Finance, or a related discipline; or the equivalent combination of education, training, and work experience
- 8+ years of relevant work experience in third-party risk, operational risk, or vendor risk
- 5+ years of experience in third-party risk with experience in offshore vendor management, site assessments, and successful completion of tasks in the promotional matrix
- Demonstrated experience as a lead with direct or indirect reports preferred
- Previous working knowledge of relevant legal and regulatory requirements, such as but not limited to:
- SEC, FINRA, CFTC, FDIC (Bonds Market)
- Bank Of England (BOE)
- Financial Conduct Authority (FCA)
- European Securities and Market Authority (ESMA)
- Business Acumen in Capital Markets, Exchanges, Clearing Houses, and/or Corporate Fixed Income
- Requires extensive knowledge of risk methodologies and techniques
- Excellent analytical, decision-making, and problem-solving skills
- Ability to persuade, negotiate and influence others to get buy-in and support
- Knowledge of ICE business environment and the ability to evaluate risk implications inherent in new product and market development
- Experience of working with a diverse range of data sources/streams and managing these effectively
- Experience identifying due diligence requirements
- Experience planning vendor engagements and overseeing and monitoring activities
- Experience in an enterprise environment within a public company
- Excellent analytical, decision-making and problem-solving skills
- Ability to develop relationships with business units, especially as it relates to operations and technology
- Excellent verbal and written communication skills to technical and non-technical audiences of various levels to both internal and external audiences
- Ability to effectively deal with issues that are confidential and sensitive in nature
- Certification such as, CISA, CISM, CISSP, CTPRP etc.
- Experience with the following tools: ServiceNow, ProcessUnity, Oracle, UpGuard, Supplier.IO
