Third-Party Risk Management Associate – Third-Party Risk Management

Job Description

Operational Risk, Senior Associate | State Street

The Tone:
This is a full-time role at State Street, located in India(Karnataka). State Street provides institutional investors with solutions to manage risk, respond to challenges, and drive performance and profitability. This role is crucial for evaluating and managing the risks associated with third-party suppliers, ensuring secure internal processes and the delivery of products and services to clients. The position supports the company’s commitment to maintaining a robust Third-Party Risk Management Program and meeting regulatory requirements.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: In-person – India(Karnataka)
• Team: Third-Party Risk Management (TPRM)
• Mission: Support the effective execution of activities across TPRM lifecycle pillars to ensure timely, consistent, policy-aligned, and audit-ready outcomes for third-party engagements.
• Tech Stack: Archer, SNOW, Microsoft Word, PowerPoint, Excel

What You’ll Actually Do
• Review: Evaluate TPRM cases, engagement records, assessment records, and supporting documentation for accuracy, completeness, and policy compliance.
• Challenge: Identify inconsistencies in inherent risk assessments and collaborate with stakeholders to resolve issues before approval, confirming appropriate risk ratings and due diligence requirements.
• Coordinate: Manage the distribution of due diligence questionnaires to third-party suppliers, monitor progress, perform follow-ups, and maintain clear records of all interactions.
• Prepare: Develop clear, concise, and audit-ready executive summaries outlining engagement scope, risk profiles, due diligence results, and control effectiveness.
• Collaborate: Build and maintain effective working relationships with internal teams, third-party suppliers, and subject matter experts to facilitate timely resolution of TPRM matters.

The Must-Haves
• Background: Overall professional experience of 2 or more years, preferably within banking, financial services, risk management, compliance, procurement, audit, or controls. Strong knowledge of third-party risk management principles, lifecycle activities, and governance requirements.
• Experience: Relevant experience in Third-Party Risk Management, operational risk, supplier risk, vendor management, or due diligence. Practical experience in TPRM case review, inherent risk assessment, due diligence outreach, risk assessment coordination, or executive summary preparation.
• Skills: Strong analytical and critical-thinking skills, excellent written and verbal communication, sound risk judgment, strong stakeholder and relationship-management skills, and strong organizational, documentation, and time-management skills. Proficiency in Microsoft Word, PowerPoint, and Excel.
• Bonus: Bachelor’s degree in business or a postgraduate management qualification. Relevant professional certification such as CRVPM, CRISC, CISM, CISA, CBCI, or an equivalent risk-management qualification. Prior experience with Archer or a comparable governance, risk, and compliance platform.