SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Paytm seeks a Senior Manager/Manager for Third-Party Risk Management (TPRM) Governance to lead the strategic design, operationalization, and oversight of the enterprise-wide TPRM framework. This role bridges cross-functional business units, executive leadership, and external stakeholders to identify, assess, monitor, and mitigate third-party risks across all vendors, suppliers, and partners.
Key Responsibilities:
TPRM Framework & Policy Governance: Establish robust governance mechanisms and end-to-end design for formulating, executing, and enhancing TPRM control frameworks, policies, and standard operating procedures. Ensure enterprise-wide adoption of third-party risk methodologies aligned with regulatory requirements. Drive data-driven, risk-based approaches to third-party evaluation, exception identification, and reporting. Design, consolidate, and present executive TPRM dashboards, trend analyses, and exception reports to the Risk Management Committee, Board of Directors, and senior leadership.
Third-Party Risk Assessment: Perform inherent and residual risk assessments, monitor SLA adherence, performance metrics, and control effectiveness across the vendor lifecycle. Lead continuous vendor risk evaluations across multiple domains including financial health, information security, operational resilience, legal, compliance, and reputational risk. Maintain and govern a centralized, risk-tiered vendor inventory categorizing third parties by service nature, data access, regulatory criticality, and concentration risk. Define periodic due diligence and monitoring frequencies aligned with organizational risk appetite and regulatory standards.
Vendor Monitoring & Remediation: Lead ongoing monitoring strategy for critical third parties using SLA performance tracking, continuous financial health reviews, threat intelligence feeds, and regulatory sanction screening. Manage and orchestrate structured, periodic vendor risk questionnaire assessments and remediation programs. Track vendor incidents, operational control failures, and risk events to drive remediation while maintaining up-to-date policies, SOPs, risk registers, and governance reporting.
Requirements:
- 6+ years of domain experience in Third-Party Risk Management, including Outsourcing Risk, Vendor Evaluation, Operational Risk, or Risk Governance within BFSI, FinTech, or regulated environments
- Deep understanding of regulatory guidelines on Third-Party Governance standards
- Demonstrated expertise in third-party due diligence, SLA governance, regulatory compliance, and audit support for key third parties
- Proven capability to assess complex, multi-domain vendor risk scenarios across legal, financial, cyber, operational, and regulatory vectors
- Strong expertise in risk scoring models, trend analysis, exception tracking, and executive dashboarding
- Bachelor's or Master's degree in Risk Management, Finance, Commerce, Law, Information Security, or related discipline
- Professional certifications in Risk Management or Information Security (e.g., ISO 27001 Lead Auditor, CISA, CRISC, CERA) preferred
