Internal Control - Vendor Governance & TPRM

Role Overview:

We are seeking an experienced and dynamic candidate for GRC Projects & Vendor Governance to join our team. The ideal candidate will play a critical role in managing Governance, Risk & Compliance (GRC) transformation initiatives and strengthening the Banks Vendor Governance framework. The role will be responsible for driving GRC projects, process automation, regulatory implementations, and overseeing Third-Party Risk Management activities, ensuring compliance with regulatory requirements and organizational objectives. The individual will collaborate extensively with cross-functional teams to improve controls, enhance governance processes, and drive technology-led solutions.

Key Responsibilities:

Role Allocation:

The role will entail approximately 70% focus on Governance, Risk & Compliance (GRC) Projects and 30% focus on Vendor Governance and Third-Party Risk Management (TPRM) activities, ensuring effective control oversight, regulatory compliance, and operational governance across the Bank.

A. GRC Projects, Transformation & Regulatory Initiatives

1. Lead Project Deliverables

• Lead and manage end-to-end GRC projects across different control functions, ensuring alignment with business objectives and regulatory requirements.
• Work closely with internal stakeholders to gather requirements, design project roadmaps, and implement solutions.
• Drive governance, risk, compliance, audit, and control-related transformation initiatives across the organization.

2. Optimize Existing Applications, Process Automation & Efficiency Enhancement

• Identify manual, repetitive, and resource-intensive activities across GRC and control functions that can be automated.
• Evaluate existing processes and recommend technology-driven solutions to improve efficiency, accuracy, and scalability.
• Drive automation initiatives in collaboration with business and technology teams.
• Monitor automation outcomes and ensure sustainable benefits through continuous process optimization.

3. Regulatory Compliance & Circular Implementation

• Analyze regulatory circulars, guidelines, and compliance requirements issued by regulators and internal governance bodies.
• Coordinate with Compliance, Operations, Product, and Technology teams to ensure timely compliance with regulatory mandates.
• Conduct gap assessments and track closure of identified action items.
• Maintain implementation evidence and documentation to support audits and regulatory reviews.

4. Project Governance & Delivery Management

• Track and manage project timelines, milestones, dependencies, and deliverables.
• Provide regular updates to senior management on project status, risks, issues, and resource requirements.
• Proactively identify and resolve project bottlenecks to ensure timely delivery.
• Establish governance mechanisms to ensure effective project execution.

B. Vendor Governance & Third-Party Risk Management

1. Vendor Governance & Risk Oversight

• Support the implementation and ongoing governance of the Vendor Governance and Third-Party Risk Management (TPRM) framework.
• Coordinate Annual Risk Reviews (ARRs) for outsourced and critical vendors through onsite and virtual assessments.

2. Vendor Assessments, Audit Tracking & Control Testing

• Track vendors audit observations, risk findings, and remediation actions until closure.
• Conduct periodic follow-ups with stakeholders and vendors to ensure timely closure of observations.
• Support monitoring and reporting of control deficiencies and risk exposures.

3. Outsourcing Governance & Control Testing

• Conduct quarterly assessment of the Outsourcing Governance Scorecard
• Identify control gaps, track remediation actions, and ensure timely closure of observations.
• Prepare periodic reporting on control testing results, compliance status, and key risk indicators.

4. Vendor Agreements & TPRM Tool Enhancements

• Coordinate with Legal, Product, Procurement, Compliance, and Business teams for execution, renewal, amendment, and closure of vendor agreements.
• Identify opportunities for enhancement of the TPRM platform and governance workflows.
• Drive automation and process improvements within the vendor lifecycle management process.

5. Vendor MIS & Governance Reporting

• Prepare and present periodic Vendor Governance dashboards and MIS covering:
• Annual Risk Review status
• Critical vendor assessments
• Open observations and remediation status
• Key vendor-related risks and escalations

Skills & Qualifications:

• Education:
• Bachelors degree in either of these fields engineering, Technology, Information Systems, Risk Management, Finance, Business Administration, or a related discipline.
• Postgraduate qualifications such as MBA, PGDM, or masters degree in risk management, Finance, Information Systems, or related fields will be an added advantage.
• Experience:
• 2-4 years of experience in managing GRC projects or similar roles, Vendor Governance, Third-Party Risk Management, Project Management
• Experience with GRC applications (e.g. RSA Archer, Jocata, Trident or similar tools) and TPRM Tool that are familiar with compliance frameworks
• Technical Skills:
• Strong understanding of GRC processes, risk management, and compliance requirements
• Proficiency in project management and basic knowledge of data analytics
• Ability to analyze data and generate actionable insights