Manager, Third-Party Resilience
KPMG US · Baltimore, MD · 1 mo ago
Hybrid$127k/yrFull-time
Responsibilities
- Cook up and oversee the execution of the Global Third-Party Risk Management Framework, standards, procedures, and governance activities throughout the supplier lifecycle.
- Carry out risk-based reviews of significant and strategic suppliers by coordinating assurance activities, gathering evidence, documenting findings, and tracking remediation to completion.
- Keep track of supplier inventories, criticality assessments, service dependencies, ownership information, and risk data across Global Functions and Member Firms.
- Coordinate supplier assurance and resilience tests, including reviews of business continuity, recovery, compliance, security, privacy, and control evidence.
- Create dashboards, management reports, executive materials, and risk insights covering supplier performance, conformity, dependencies, issues, and evolving third-party risks.
- Collaborate with Procurement, Risk, Legal, Information Security, business stakeholders, and Member Firms to enhance program consistency, stakeholder engagement, and third-party risk outcomes.
Qualifications
- A minimum of five years of recent experience in third-party risk management, supplier governance, operational resilience, business continuity, procurement risk, or a related field.
- A Bachelor's degree from an accredited college or university or eight years of equivalent professional experience; relevant certifications in third-party risk, resilience, business continuity, information security, or project management are advantageous.
- Proficiency with Microsoft 365 applications and experience creating or interpreting dashboards, reports, and management information using tools like Power BI.
- Demonstrated knowledge of third-party management frameworks, supplier lifecycle processes, risk assessment methodologies, and ongoing monitoring practices.
- Experience coordinating cross-functional initiatives and building strong relationships with stakeholders across risk, procurement, legal, information security, and business teams.
- Strong analytical, reporting, and problem-solving skills with the ability to translate complex supplier risks into actionable business insights.