Job Description
About the Role
As a Third-Party Risk Manager within the Operational Risk & Resilience Centre of Excellence (CoE), you will report to the Associate Director, Operational Resilience and serve as a subject matter expert on the Third-Party Risk theme for both the Non-Financial Risk (NFR) function and the broader Institutional Division.
You will play a key role in driving a consistent, risk-based, and forward-looking approach to third-party risk management, aligned with ANZs Operational Resilience strategy and evolving regulatory expectations. The role will contribute to the execution of the Institutional Third-Party Risk uplift strategy and support the development of a globally consistent Third-Party Risk Management (TPRM) operating model.
Institutional Banking delivers world-class solutions to clients across Australia, New Zealand, Asia, Europe, America, Papua New Guinea, and the Middle East. The Operational Risk & Resilience CoE provides specialist expertise across risk domains including Operational Resilience, Third-Party Risk, Transaction Processing, Model Risk, Physical Security, People Risk, Legal Risk, Statutory Reporting, Tax, and Change Execution.
Role Location: Bengaluru
Role Type: Permanent, Full-time
What will your day look like
As a Senior Associate Third-Party Risk Management & Operational Resilience, you will:
- Build and embed consistent governance, reporting, and management information (MI) frameworks for Third-Party Risk across the division.
- Enhance visibility of third-party risk exposure, emerging vulnerabilities, and trends across business units and geographies.
- Support the delivery of the Institutional Third-Party Risk uplift strategy as part of the broader Operational Resilience agenda.
- Assess and triage Third-Party Non-Financial Risk requests using a materiality-based approach.
- Drive a "one-way, same-way" operating model to ensure consistency, quality, and scalability across the division.
- Partner with Risk Owners and Control Owners to improve risk identification, assessment, control design, and control effectiveness.
- Support Line Risk Owners in meeting their risk management accountabilities and responsibilities.
- Contribute to the ongoing evolution and enhancement of Third-Party Risk Management frameworks, processes, and operating models.
- Translate regulatory requirements and industry expectations into practical and sustainable business outcomes.
What will you bring
To grow and be successful in this role, you will ideally bring:
- 10 11 years of overall professional experience, including 6+ years of relevant experience in Operational Resilience, Third-Party Risk Management (TPRM), Non-Financial Risk (NFR), Operational Risk, or a related risk discipline.
- Strong experience within Banking, Financial Services, or other highly regulated industries.
- Demonstrated expertise in managing the end-to-end third-party risk lifecycle, including due diligence, onboarding, risk assessment, ongoing monitoring, governance, and exit management.
- Solid understanding of Operational Resilience and Third-Party Risk Management frameworks, with the ability to apply them effectively in complex business environments.
- Experience interpreting and implementing regulatory requirements and industry standards, including CPS 230, DORA, or similar resilience and risk management frameworks.
- Proven track record in developing, enhancing, or implementing risk management, governance, and reporting frameworks.
- Strong stakeholder management skills, with the ability to influence, challenge, and collaborate effectively across business, risk, compliance, technology, and operations teams.
- Excellent communication and relationship-building skills, with experience engaging senior stakeholders and governance forums.
- Ability to translate complex regulatory and risk requirements into practical, sustainable business outcomes.
- Experience supporting Risk Owners and Control Owners in strengthening risk identification, assessment, control design, and control effectiveness.
- Strong analytical and problem-solving capabilities, with a focus on continuous improvement and risk uplift initiatives.
- Experience supporting or delivering large-scale Third-Party Risk Management transformation programs or system implementations (e.g., TPRMHub or similar platforms).
- Exposure to global operating environments and international regulatory landscapes.
- A strong understanding of the relationship between Third-Party Risk Management and broader Operational Resilience outcomes.