TPRM Risk Manager

Our client’s mission is to automate the end-to-end motor claims management process using best-in-class digital and AI-powered solutions, with security, compliance, and operational excellence at the core.

We are looking for an experienced and motivated TPRM Risk Manager / TPRM Expert to join the team.
The TPRM Risk Manager will ensure high-quality Third-Party Risk Management lifecycle support for business stakeholders, acting as a trusted subject matter expert, guiding stakeholders through complex risk topics, performing concentration-risk assessments, and driving continuous improvement and awareness to strengthen the TPRM framework.
This role also includes coordinating and providing quality assurance for TPRM lifecycle activities, delivering training to internal teams and third parties, and maintaining ongoing assessment of concentration risks associated with third-party service providers.

Key Responsibilities:

• Lead TPRM lifecycle activities: Oversee, guide, and provide quality assurance for
  tasks performed by TPRM Lifecycle Coordinators / Junior TPRM Specialists.

• Conduct concentration risk assessments: Perform regular evaluations of
  concentration risk at the entity level for third-party service providers.

• Risk mitigation advisory: Support Business Owners in identifying mitigation
  measures and guide them through informed decision-making.

• Regulatory compliance: Ensure compliance with country-specific regulatory
  requirements and global standards.

• Monitoring & framework alignment: Develop and implement monitoring
  mechanisms aligned with Group TPRM Function standards, including integration with
  the Non-Financial Risk Management framework.

• Management information & reporting: Build processes to collect, analyse, and
  report TPRM data to ensure ongoing compliance with monitoring requirements.

• Training & awareness: Deliver internal and third-party training on TPRM, ICT
  security, and digital operational resilience.

• Expert knowledge development: Maintain and continuously develop the expertise
  required to manage third-party arrangements and associated risks.

• Cross-functional collaboration: Ensure coordinated involvement of all relevant
  functions throughout the TPRM lifecycle.

Key Requirements: 

• Proven experience in Third-Party Risk Management, Vendor Management, Compliance, Risk Analysis, or Security, ideally with exposure to regulatory frameworks such as ISO 27001, NIS2, DORA or outsourcing guidelines.

• Degree in Business, Law, IT, Risk, Compliance, or related fields (or equivalent practical experience).

• Strong capabilities in risk assessment, mitigation, monitoring, and managing SLAs and contracts with third parties.

• Excellent communication skills with the ability to convey complex risk topics to leadership and cross-functional teams.

• Experience leading or mentoring risk teams or junior analysts.

• Strong commitment to continuous improvement, staying up-to-date on TPRM trends, technologies, and industry best practices.

• Upper-intermediate proficiency in English and Spanish.

• Proficiency in MS Office; experience with TPRM or GRC tools is beneficial.