Job Summary

Marsh is seeking a Vendor Risk Management expert for the following position based in the Pune, India office.

Designation: Senior Manager - Operations Management (GS - Vendor Ops Third Party Vendor Risk Management )

Location: Pune, India

Responsibilities

- Strategic Leadership: Develop and refine the third-party risk management strategy aligned with organizational goals and regulatory requirements.
- Risk Assessment Due Diligence: Manage comprehensive risk assessments for high-risk vendors, including financial stability, cybersecurity, operational resilience, privacy/AI, compliance, and reputational risks.
- Policy Framework Development: Establish, implement, and continuously improve policies, procedures, and standards for third-party risk management.
- Vendor Lifecycle Management: Oversee the entire vendor lifecycle, from onboarding and due diligence to ongoing monitoring and offboarding.
- Risk Monitoring Reporting: Design and oversee the implementation of key risk indicators (KRIs), dashboards, and reporting mechanisms for senior management and risk committees.
- Regulatory Industry Compliance: Ensure all third-party activities comply with applicable laws, regulations, and industry standards (e.g., GDPR, HIPAA, DORA, SOC, etc.).
- Stakeholder Collaboration: Partner with legal, procurement, compliance, IT, and other risk management functions to evaluate vendor risks and develop mitigation strategies.
- Third-Party Risk Program Oversight: Lead the third-party risk management team, providing mentorship, guidance, and performance management.




- Issue Incident Management: Oversee the investigation and resolution of third-party risk incidents, including breach or compliance issues.
- Audit Review: Coordinate internal and external audits related to third-party risk, ensuring timely remediation of identified issues.
- Training Awareness: Promote a risk-aware culture through training programs, workshops, and communication initiatives.
- External Relationships: Manage relationships with external vendors, risk assessment providers, and industry forums.

What you need to have

- Bachelor's degree with 8-10 years of experience. Masters preferred
- > 5 years of experience in third-party/vendor risk management, compliance, or related fields
- Deep understanding of regulatory frameworks, industry standards, and best practices related to third-party risk.
- Proven experience managing complex vendor portfolios, including high-risk or strategic vendors.
- Strong knowledge of cybersecurity, data privacy, operational resilience, and contractual risk mitigation.
- Demonstrated ability to develop and implement risk management frameworks and policies.
- Excellent leadership, strategic thinking, and stakeholder management skills.




- Strong analytical, problem-solving, and decision-making capabilities.
- Professional certifications such as Certified Third Party Risk Professional (CTPRP), Certified Risk Management Professional (CRMP), Certified Information Systems Security Professional (CISSP), or equivalent are highly desirable.

What makes you stand out

- Experience in highly regulated industries such as financial services, Insurance, or technology.
- Familiarity with third-party risk management tools and platforms.
- Understanding of Procurement functions such as Sourcing, Contracting, Vendor Operations and Buyer functions.
- Ability to influence organizational culture and promote risk awareness.
- Strong communication skills, capable of presenting complex risk issues to executive leadership.

Why join our team

- We help you be your best through professional development opportunities, interesting work and supportive leaders.
- We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
- Our scale enables us to provide a range of career opportunities, as well as perks and rewards to enhance your well-being.

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Manager - Operations Management (GSP - Vendor Risk Management) (Pune)
🏢 Oliver Wyman
📍 Pune