# Senior Manager/Manager – Third-Party Risk Management (TPRM) Governance

- Link: https://100xfounder.com/job/paytm-senior-manager-manager-third-party-risk-management-tprm-governance-ef477a/
- Published: 2026-10-19T18:38:29+05:30
- Author: 

Employment Type: Full-Time

Role Overview

The Senior Manager/Manager – TPRM Governance will lead the strategic design, operationalization,
and ongoing oversight of the enterprise-wide Third-Party Risk Management framework.

This role is responsible for identifying, assessing, monitoring, and mitigating 
third-party risks across all vendors, suppliers, and partners.

The person will champion the TPRM framework as aligned to applicable compliances
across regulations and statutory mandates—while serving as the primary bridge between
cross-functional business units, executive leadership, internal and external stakeholders.

Key Responsibilities

TPRM Framework & Policy Governance

Establish robust governance mechanisms and the end-to-end design for formulating,
executing, and enhancing TPRM control frameworks, policies, and standard operating
procedures.

Ensure enterprise-wide adoption of third-party risk methodologies, aligning with
applicable regulatory requirements.

Drive a data-driven risk-based approach to 3rd party evaluation, exception identification,
and reporting.

Design, consolidate, and present executive TPRM dashboards, trend analyses, and 
exception reports directly to the Risk Management Committee, Board of Directors,
and Senior leadership.

Third-Party Risk Assessment

Perform inherent and residual risk assessments, monitor SLA adherence, performance
metrics, and control effectiveness across the vendor lifecycle.

Lead and oversee continuous vendor risk evaluations across multiple domains, including
financial health, information security, operational resilience, legal, compliance,
and reputational risk.

Maintain and govern a centralized, risk-tiered vendor inventory categorizing third
parties based on service nature, data access, regulatory criticality, and concentration
risk.

Define periodic due diligence and monitoring frequencies aligned with organizational
risk appetite and regulatory standards.

Lead the ongoing monitoring strategy for critical third parties, utilizing SLA performance
tracking, continuous financial health reviews, threat intelligence feeds, and regulatory
sanction screening.

Manage and orchestrate structured, periodic vendor risk questionnaire assessments
and remediation programs as defined under the TPRM framework.

Track vendor incidents, operational control failures, and risk events to drive remediation,
while maintaining up-to-date policies, SOPs, risk registers, and governance reporting.

Required Skills & Competencies:-

Industry Expertise: 6+ years of domain experience in Third-Party Risk Management,
including Outsourcing Risk, Vendor Evaluation, Operational Risk, or Risk Governance
within BFSI, FinTech, or a regulated environment.

Regulatory Frameworks: Deep understanding of regulatory guidelines on Third-Party
Governance standards.

Vendor & Operational Oversight: Demonstrated expertise in 3rd Party due diligence,
SLA governance, regulatory compliances, and audit support for key third parties

Multi-Domain Risk Evaluation: Proven capability to assess complex, multi-domain 
vendor risk scenarios across legal, financial, cyber, operational, and regulatory
vectors.

Analytical & Data-Driven Mindset: Strong expertise in risk scoring models, trend
analysis, exception tracking, and executive dashboarding.

Qualifications & Experience

Education: Bachelor’s or Master’s degree in Risk Management, Finance, Commerce, 
Law, Information Security, or a related discipline.

Certifications: Professional certifications in Risk Management or Information Security(
e.g., ISO 27001 Lead Auditor, CISA, CRISC, or CERA) are preferred.