Risk Assessor, Third Party Risk Management

A Risk Assessor, Third Party Risk Management (TPRM) is required to join a leading global pharmaceutical business based in Cork. This is an opportunity to join a vibrant multi-cultural and multi-lingual team where you will play your part in making a difference for people the world over by supporting the business as it discovers, develops and delivers medicines that help people live longer, healthier and more active lives.

The Risk Assessor will work in partnership internally, cross functionally and externally with third parties, and to assess and mitigate third party risk. Current risk domains in scope are Anti Corruption, Privacy, Information Security and Information Systems Quality, which will expand as we grow the programme.

Responsibilities:

• Determine, conduct and incorporate applicable risk domain screenings into due diligence activities and ongoing oversight plan
• Conduct assessments in a coordinated fashion with other risk domains. Assessment work includes but is not limited to scoping the assessment, testing controls, conducting interviews, reviewing evidence, determining final disposition of findings, written and verbal communication of findings, rating criticality of findings and evaluating action plans provided by the third party
• Set risk domain ongoing monitoring schedule and activities per inherent risk domain level
• Perform Ongoing Monitoring activities per the inherent risk domain level as a part of the TPRM Program
• Define and own risk domain assessment methodology for control assessments activities
• Provide risk domain requirements for termination and off-boarding activities, supporting these activities as required
• Maintain risk domain questions for Inherent Risk Questionnaire (IRQ) for the TPRM tool
• Work with risk domain partners to provide risk domain specific scoring thresholds for inherent risk domain levels per common TPRM risk tiering scale

• Bachelor’s Degree or CIPP/CIPT/CTPRP/CRISC/CISA/CISM qualification
• Experience performing third party risk assessments in areas including but not limited to Anti-Corruption, Privacy, Information Systems and Information Systems Quality.
• Minimum of three or more years of audit, operational risk or other risk management experience or other proven related business experience
• Good understanding of risk management and internal control leading practices within specialized area of focus
• Demonstrated ability to work effectively in a complex, highly regulated environment
• Evidence of strong analytical and data management skills