Risk Manager | Contract

Ploy Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Risk Manager | Contract

We are seeking an experienced Senior Third-Party Risk Manager to lead and manage third-party risk activities across the Technology & Operations (T&O) function. The role requires a strong understanding of enterprise risk, vendor management, governance frameworks, and regulatory expectations. The ideal candidate will establish and embed a pan-risk third-party risk profile, drive consistent risk assessment practices, and oversee the complete lifecycle of T&O third-party contracts including vendors, non-vendors, and inter-group arrangements (IGA).

Responsibilities

• Develop and implement a comprehensive pan-risk third-party risk profile for T&O.
• Drive a consistent RCSA (Risk and Control Self-Assessment) methodology across T&O with defined metrics, CSTs / KCIs, and KRIs, including country-specific cascades.
• Manage the end-to-end lifecycle of third-party contracts (vendor, non-vendor, and IGA) for T&O, ensuring alignment with internal policies and regulatory standards.
• Establish and maintain consistent reporting on key controls such as Security, Resilience, Data, and Third Party risk.
• Define and implement a pan-risk RACI model to support roles and responsibilities in the third-party risk profile.
• Create and lead the T&O Third-Party Risk Governance Forum, ensuring stakeholder engagement and effective oversight.
• Report T&O's third-party risk posture, including control breaches and risk exceptions, to relevant governance bodies such as GTPRMC and T&O NFRC.

Requirements

#J-18808-Ljbffr