Description

Operate

Be it support with regulation, risk or compliance, Operate delivers. Human-led and tech-powered, it is the backbone of PwC’s unique approach to operational delivery - Execution Managed Services. Harnessing the power of tech and data, we work with some of the most recognisable organisations worldwide, wherever they need us to be. We deliver sustained outcomes through our managed solutions, as well as transforming and running complex operational processes that often create challenges or hinder client progress. Underpinning all of this is our commitment to ensuring our people are equipped with tomorrow's skills to drive success for our clients today.

About the Team

Our Compliance Testing practice is made up of four competency areas including Finance, Technology, Operational and Regulatory. Our testing and compliance services provide oversight and assurance over critical functions, operations and processes - helping clients to understand where they have potential gaps and exposures. We work with multiple industries including Banking and Capital Markets; Insurance and Asset Wealth Management, Pharmaceuticals, Manufacturing, Retail, Health Services, Oil and Gas, and many more.

Skills and Experience

• Knowledge of information risk and compliance principles. Broad understanding of security technology and related risk and compliance issues.

• Ability to build relationships with various stakeholders and adapt communication style appropriately through excellent written and verbal communication skills.

• Ability to adapt to new or changing processes quickly whilst planning and prioritizing own workload to meet deadlines and targets.

• Ability to apply a risk-based approach across third party due diligence assessments

• Knowledge of Information Security Standards such as ISO 27001 and SOC.

About the Role

As a Third Party Senior Associate, your role is to work on Third Party Risk Management (TPRM) engagements to help identify and reduce the risks associated with using third parties.

Key Responsibilities

• Liaise with key stakeholders to gather information on relevant third parties, determining scope of assessment.

• Perform segmentation to effectively organise and manage third party populations, prioritising vendors based on criticality and risk posed to the organisation.

• Conduct outreach and due diligence assessments for new and existing vendors.

• Review completed assessments and third party evidence. Assess adherence to contractual agreements, industry standards and laws and regulations.

• Apply knowledge of Information Security, Data Privacy and Compliance principles, and Third Party Risk Management processes.

• Evaluating Control Environments and conducting design effectiveness testing over policies and procedures.

• Identify areas of risk and non-compliance. Evaluate impact of risk on the organisation e.g. if a risk was exploited, what would be the financial or reputational impact.

• Negotiate the remediation of the identified risks with the organisations.

• Create risk reports, reporting identified risks to senior stakeholders. Support remediation of risk, manage and track identified risks until closure.

• Monitor and maintain personal Key Performance Indicators (KPIs), ensure targets and deadlines are met.

• Collaborate with colleagues across your wider team to drive ideas and solutions. Work to align processes and procedures, driving consistency across Technology Risk.

• Assist with the development and implementation of project documentation and guidance.

• Support others through coaching and share key knowledge. Conduct shadowing sessions and perform peer review.

Post source:jobs.theguardian.com

Posters Information:

Name:PWC

Contact number: