TPRM Governance, Operations, and Reporting Manager
ExternalPrepare for this interview
EliteAI-generated questions, company research, and talking points tailored to this role
About the role
The Third-Party Risk Governance, Operations, and Reporting Manager is responsible for establishing and maintaining the governance framework, reporting capabilities, and operational oversight of the Bank's Third-Party Risk Management (TPRM) program. This role assures consistent application of policies, standards, risk framework, regulatory expectations and consideration of emerging risks. The position is critical to strengthening risk transparency, supporting regulatory compliance, and enabling informed decision-making across the third-party lifecycle. Duties & Responsibilities Lead the governance framework for the TPRM Program, assuring alignment with regulatory expectations (e.g., OCC guidance), third party risk management best practices, internal policies, and integration of emerging risks. Develop, maintain, and enhance TPRM policies, standards, and procedures to support a consistent control environment across the bank. Lead the execution of the TPRM Program Strategy, Roadmap, and Workplan. Develop and deliver training for the TPRM team and business stakeholders across the bank to assure a clear understanding of the TPRM Program, roles, responsibilities, and expectations. Identify and execute TPRM reporting and metrics, including the development of dashboards and executive-level reporting that provide clear visibility into third-party risk exposures, trends, and program performance. Establish and monitor key risk indicators (KRIs), key performance indicators (KPIs), issue, exception management processes to support timely identification, escalation, and remediation of third-party risks. Oversee governance over critical and high-risk vendors, including oversight of risk profiles, risk tiering, segmentation, and alignment to business resiliency and concentration risk frameworks. Partner with cross-functional stakeholders (e.g., SOX, MRM, AIGA, Legal, Compliance, IT, and Business Units) to promote adherence to TPRM requirements and embed risk management practices into third-party lifecycle activities, and to identify opportunities to improve the TPRM Program. Identify, develop, and maintain TPRM technologies, including use of Artificial Intelligence (AI) capabilities, to perform TPRM responsibilities. Oversee TPRM vendor inventory and reconciliations. Oversee the vendor exit strategy and fourth party framework. Lead and facilitate internal audits and regulatory examinations by providing documentation, analysis, and responses related to third-party risk assessments It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.