Third Party Risk Manager

You own the mechanics that make the TPRM program run day to day. You are the person who keeps the vendor and partner inventory reconciled, moves relationships through onboarding and due diligence, coordinates SME reviews across every function that touches third-party risk, tracks BCDR posture on every critical vendor, and keeps the TPRM issues pipeline current.

• Inventory: maintaining the third-party inventory and running the quarterly reconciliation against payment and contracting data (you do not own payment/contracting controls yourself — you reconcile against them).
• Onboarding: running new vendor and partner relationships through intake and onboarding.
• Initial & Ongoing Due Diligence: executing initial due diligence at onboarding and ongoing due diligence on the recurring schedule for existing relationships.
• Audit Oversight: tracking and coordinating third-party audit requirements and following up on findings.
• SME Reviews: coordinating and tracking risk-based reviews with subject matter experts across Information Technology, Information Security, BSA/AML & OFAC, Compliance (Consumer & Regulatory), Credit, Finance, and Legal.
• BCDR: collecting and tracking RTO & RPO assessments for critical vendors, and maintaining exit plans.
• Fourth Party Due Diligence: extending due diligence downstream to critical fourth parties where required.
• Vendor DDQ & Partner DDQ: administering and tracking due diligence questionnaires for both vendor and partner relationships.
• SLA: tracking service level agreements and monitoring performance against them.
• Issues: maintaining the TPRM issues log from identification through remediation and closure.
• Reverse Due Diligence: supporting due diligence requests that come from partners and counterparties assessing Augustus.
• Weeks 1-4: You learn how third-party risk actually runs today — what's in (and missing from) the inventory, how onboarding and due diligence really move through the pipeline, which SME reviews are current versus overdue, what BCDR and exit plan documentation exists for critical vendors, and where the issues log breaks down.

…