- Conduct vendor risk assessments, ensuring third-party services and products align with internal risk and security policies.
- Regularly review vendor performance and risk exposure, working with procurement and legal teams as necessary.
- Collaborate with procurement teams to drive adherence and enhance controls across the E2E Procurement lifecycle.
- Ensure compliance with relevant industry standards and regulatory requirements.
- Generate regular reports and dashboards for TPRM process and Supplier risk factors, compliance metrics, and key performance indicators for stakeholders and leadership.
- Work closely with Procurement, GBUs and Risk Domain Experts to integrate risk management practices into the supplier relationship lifecycle.
- Identify opportunities for enhancing risk management processes, implementing best practices to drive positive outcomes.
Requirements
- 4 - 6 years of experience in Third Party Risk management, conducting due diligence.
- Hands-on experience with risk management tools (e.g., CRA, Ariba, OneTrust) and frameworks (e.g., ISO 27001, GDPR).
- Experience in healthcare and/or life-science industry.
- Familiarity with procurement processes and category management principles.
- Global or international experience and ability to work with a diverse team.
- Bachelor's degree in Information technology, Business, Cybersecurity, Risk Management, or a related field.
- Fluent in English (spoken and written)
Benefits
- Opportunity to work with a global pharmaceutical company making a positive impact on people's lives.
- Cooperative and dynamic work environment.
- Professional development and growth opportunities.
- Comprehensive health insurance and wellness programs.
- Retirement savings plan and employee stock purchase plan.
- Paid time off and holidays.