Manager - Third Party Risk Management

About the role

EY's Risk Consulting team is recruiting a Manager for Third Party Risk Management (TPRM) in a hybrid position based in Warringah, Sydney. The role supports public and private sector clients across TPRM and risk-focused engagements, helping them improve resilience through current-state assessments, strategy advice, transformation programmes and long-term operational services. Flexible work arrangements with reduced hours may be possible.

Key responsibilities

• Lead a team of TPRM professionals delivering TPRM engagements, including building TPRM capabilities or reviewing clients' current ones
• Develop, refine and deliver TPRM solutions, tools and processes that create value and minimise risk for clients
• Collaborate across EY with a diverse range of clients
• Help clients identify, evaluate and manage third-party risks (cyber, privacy, resilience, regulatory and compliance, financial, operational, reputational) across the third-party management life cycle

Required profile

• 8-10 years' experience in consulting, or in-house experience running a TPRM programme
• Experience with current-state assessments, design and build, and implementation of TPRM programmes including governance, inventory, risk approaches, policies and standards, automation and reporting
• Experience planning, executing and reporting third-party risk assessments for Australian and international third parties
• Understanding of risks such as geopolitical, reputational, financial, regulatory, digital, cyber, operational, strategic and business continuity risk
• Ideally: complementary knowledge of enterprise resilience, GRC, regulatory and compliance or risk management, and experience managing key accounts, tenders and proposals
• Team leadership, mentoring and project delivery experience

Required skills

• TPRM and GRC tools such as Archer, ServiceNow, SAP, ProcessUnity and Prevalent
• ERM and GRC principles, information security and data privacy, ISO27001, NIST, SOC 1 and SOC 2 reports, and control frameworks such as COSO and ISO
• Analytical, problem-solving, writing and communication skills

What we offer

• Career development and flexible work arrangements
• A benefits package including a yearly wellness incentive, extra flex leave and family-friendly policies
• Competitive salary open to negotiation depending on skills and experience