Risk Manager

Job description

The Vendor Risk Manager oversees the third-party risk management program from inception to closure, including due diligence, risk assessments, and ongoing supplier performance monitoring. They prepare risk reports for senior committees and provide clear recommendations to leadership regarding risk levels and mitigation actions. They participate in negotiating with suppliers to ensure the inclusion of audit rights, data protection, and compliance monitoring. They also manage the termination of supplier relationships to ensure data deletion and access revocation in accordance with regulatory requirements.

Requirements

• 3-4 years of experience in third-party risk management, supplier risk management, or operational risk, preferably in a payments, lending, banking, or fintech company
• practical knowledge of NIST CSF, ISO 27001, SOC 2, and standardized assessment tools like SIG or CAIQ
• familiarity with supplier-related regulations: consumer credit rules, data privacy (GDPR/CCPA), PCI-DSS, and continuity requirements for critical third parties
• ability to negotiate directly with suppliers and manage contract terms such as audit rights and breach notifications
• ability to simplify risk results for non-specialists and communicate them to commercial teams and management
• strong analytical skills to interpret supplier performance and control data
• excellent communication and engagement skills at all levels of the organization
• full professional proficiency in English
• Arabic is an added advantage
• direct experience in BNPL or consumer credit (an added advantage).

Skills