Senior Consultant, Third Party Risk Management (TPRM)

JOB DESCRIPTION

Core Responsibilities

• Manage the intake and reviews for all net‑new vendors entering the organization; validate scope, data flows, service criticality, and inherent risk indicators at the point of request.
• Operate the intake workflow across Workday Strategic Sourcing (WSS) and ProcessUnity (PU); ensure requests are properly classified and routed.
• Collaborate with Procurement to align intake with sourcing milestones (RFP / RFI, contract negotiation)
• Produce Reporting metrics on intake volumes, SLA adherence, inherent risk distribution, and critical third party supplier activities.
• Apply a pragmatic triage model (e.g., exempt items; existing supplier / same scope; existing supplier / new scope; new supplier / new scope) to focus effort on where risk is highest and eliminate unnecessary reviews.
• Function as the liaison across Procurement, Legal, InfoSec / Tech Risk, Privacy, Business / Operational Resiliency, and Finance to orchestrate TPRM activities within the contracting process, ensuring a seamless and efficient stakeholder experience.
• Co-lead end‑to‑end risk assessments for high‑impact / new vendors : scoping, risk tiering (IRQ), due‑diligence review (DDQ), and control validation (remote or on‑site), with audit‑ready documentation.
• Coordinate reviews with SMEs (InfoSec, Compliance, Resiliency, Finance); synthesize control gaps and propose remediation, acceptance, or compensating controls in line with the TPRM policy.
• Provide coaching to business owners, managed service providers and vendors on completing questionnaires, evidence expectations, and timelines; handle escalations and sensitive assessments with discretion.
• Lead incremental workflow improvements in WSS / PU and support roadmap initiatives (e.g, Intake Optimization, IRQ refresh, scaled issue management, and risk‑intelligence integrations).

Qualifications

Things that set you apart…