Third Party Risk Management Senior Associate

Job Description

The Third Party Risk Management (TPRM) Senior Associate plays a critical role in the execution, operation, and continued maturity of the firm s TPRM program. This role requires strong hands on experience across supplier lifecycle management, from intake and onboarding through ongoing monitoring and termination, as well as deep operational involvement in inherent and residual risk assessments, control evaluations, issue management, and risk reporting.

The ideal candidate will be operationally proficient, able to contribute immediately to day to day TPRM activities, and ensure that TPRM operations run smoothly, efficiently, and in alignment with established frameworks, regulatory expectations, and internal standards. This role involves active participation in the implementation of process enhancements, system changes, and new risk workflows, while also supporting program scalability and continuous improvement.

Success in this role requires strong problem solving skills, effective communication and stakeholder engagement, and the ability to adapt quickly in a dynamic and evolving risk environment. The Senior Associate is expected to move beyond purely task based execution by applying sound judgment, identifying process improvement opportunities, and partnering closely with cross functional teams to deliver practical, value driven risk outcomes.

The right candidate will bring the experience and mindset necessary to be an active contributor to the execution, stabilization, and maturation of Grant Thornton s TPRM program, balancing operational rigor with flexibility, innovation, and a customer first approach.

Summary of Responsibilities

Demonstrate extensive knowledge of the end to end supplier lifecycle, from onboarding and due diligence through ongoing monitoring, remediation, renewal, and termination/offboarding

Support the execution of third party risk assessments, requiring strong working knowledge of inherent and residual risk assessments, control evaluations, supplier risk profile creation, risk reporting, and accurate documentation of assessment outcomes

Demonstrate working knowledge of supplier due diligence and screening processes using industry leading tools such as LexisNexis, CLEAR, World Check, Dow Jones Risk & Compliance, and Refinitiv, to identify financial, reputational, compliance, and regulatory risks.

Support the ongoing implementation and maturity of the TPRM program by assisting with testing newly implemented process changes and system enhancements, validating adherence to defined standards, and preparing reports on findings and improvement opportunities.

Engage with stakeholders to communicate findings from program adherence testing and recommend corrective actions.

Assist in developing and refining risk management strategies, policies, and procedures to address identified risks.

Act as the primary liaison between the business relationship owner and third-party risk management stakeholders such as and not limited toGlobal Sourcing/Procurement, InfoSec Team, Privacy Team etc., fostering strong relationships.

Manage and mentor junior analysts within the TPRM team (if applicable).

Coordinate with internal stakeholders to integrate third-party risk management practices into overall business processes.

Prepare detailed risk reports for executive and senior management levels and stakeholders.

Demonstrate an innovative mindset by leveraging AI and advanced technologies to solve business problems, improve efficiency, and enhance TPRM processes; willing to challenge conventional ways of working and deliver solutions that create tangible value.

Provide support in the creation and maintenance of policies, procedures, reports and databases related to third-party risk management.

Leverage advanced working knowledge of GRC platforms, including OneTrust, to manage third party risk assessments, compliance tracking, issue management, and reporting; experience working with multiple GRC tools preferred.

Stay updated on regulatory changes and ensure compliance with industry standards and regulations.

Other duties as assigned.

Qualifications

Bachelor s degree in Business, Finance, Accounting, Information Security, or a related field.

5 years of experience in third-party risk management, internal audit, compliance, or related fields.

Demonstrated experience in developing and implementing risk management frameworks.

Strong leadership and project management skills.

Excellent interpersonal, communication, and negotiation skills.

Proficiency with GRC tools and software. Experience with OneTrust is a plus.

Possess working knowledge of SAP Ariba, with the ability to navigate the tool and understand procurement request information relevant to third party risk assessments.

Relevant certifications (e.g., CRISC, CISM, CISSP, CTPRP, ISO 27001) are highly desirable.

Proficient in Microsoft Office and productivity applications (Excel, Word, Power Point, SharePoint, Azzure Dev-Ops).

Demonstrate a strong customer first mindset, with a focus on responsiveness, stakeholder collaboration, and delivering high quality, timely outcomes.

Self-motivated with the ability to work autonomously at times, involving team members and escalating issues as needed.

Strong organizational skills with the ability to prioritize, coordinate, and complete multiple concurrent tasks.

Detail oriented and deadline-focused.

Possess excellent relationship-building skills and drive outcomes through interactions with GT INDUS and GTUS professionals.