Third Party Risk Manager, Ahmedabad (India)

Description

Qatar Airways is recruiting for the role of Third-Party Risk Manager based at our Global Business Services (GBS) in Ahmedabad, Gujarat (India).

The position is primarily responsible for leading the central Third-Party Risk Management (TPRM) team with delivery of TPRM lifecycle across the in-scope third party population, with particular focus on Group’s most critical third-party relationships, covering inherent risk assessment, due diligence, onboarding, continuous monitoring and offboarding, and provides input to the scoping methodology. Also, have to play role of technical lead on the practical application of the TPRM Framework, sets the operating rhythm with User Departments and specialist functions, resolves technical and operational matters independently, and escalates contentious or high exposure matters to Head of QICA.

Responsibilities:

• Translate TPRM Framework into operating procedures, templates and working instructions for the central TPRM team, and into practical guidance for User Departments where they have a role in the process,

• Provide expert advice to divisions and to first- and second-line functions on the practical application of third-party risk requirements, including assessment approach, evidence standards and risk disposition, and builds strong working relationships with User Departments and the relevant specialist functions

• Secure the engagement and commitment of divisional leadership to applying the TPRM Framework, building buy-in, addressing resistance and agreeing realistic timelines so that divisions complete the assessment of their critical third parties as planned, escalating to the Head of QICA where commitment cannot be secured,

• Act as a consulted party to the framework owner on the scoping methodology, providing subject matter input on scoping criteria, thresholds and auto-triggers, and using assessment outcomes to identify where the scoping rules may need recalibration,

• Provide structured, evidence-based feedback to the framework owner on the design, calibration and practicability of the TPRM Framework, drawing on the team’s operational experience.

• Drive the continuous improvement of the central TPRM operating approach and supports the progressive extension of coverage across the third-party population, adjusting ways of working as scope, volumes and risk exposure evolve,

• Lead the design, implementation and ongoing development of the technology solution supporting TPRM, working with the framework owner and IT, and identifies opportunities to simplify, automate and improve the efficiency of third-party risk activities,

• Prepare the analysis, evidence and reporting used by the Head of QICA to provide clarity and assurance to executive and governance stakeholders on the status of the third-party control environment, and attend such forums as subject matter expert where required,

• Plan and prioritize the team’s workload on a risk-based basis, set assessment standards, turnaround times and key performance indicators for the team, monitors performance against them and takes corrective action where required,

• Manage team capacity and resourcing against the assessment pipeline, flagging shortfalls and re-prioritizing where required,

• Provide technical coaching so that the team develops genuine depth in third party risk assessment and evidence evaluation,

• Ensure a complete and reconciled inventory of in-scope third parties is maintained, including risk classification, relationship owner, contract references and key dates,

• Direct the team’s execution of Inherent Risk Assessments for third parties handed over to the central team following scoping, obtaining operational input from User Departments and specialist input where required, raises the tier where the assessment warrants it, and submits the rationale to the framework owner for sign-off where the outcome supports a lower tier,

• Direct the execution of due diligence proportionate to the assessed level of risk, securing specialist input from functions such as, but not limited to, Compliance, Legal, Information Security, the Data Protection Office and Procurement where required, and personally leads the most complex or highest-exposure assessments,

• Determine from the outcome of the risk assessment and due diligence, which risk mitigations need to be secured contractually, and communicate these requirements to the User Department, Procurement and Legal, who remain responsible for drafting, negotiating and agreeing the contract terms

• Provide the final check that all prerequisite lifecycle stages are complete and formally closed before a third party is onboarded, and escalates deviations,

• Oversee the support provided to User Departments in performance review cycles and in the structured offboarding of third parties, including data return or destruction, access revocation and record closure,

• Ensure the TPRM system record is maintained so that assessments, evidence, approvals and decisions are complete, current and audit-ready,

• Direct the delivery of training and awareness for User Departments and relationship owners on their third-party risk responsibilities,

• Own the response to Internal Audit recommendations relating to third party management, ensuring they are addressed on time and to the required specification,

• Acts as the first escalation point for the team and for User Departments on complex or disputed third party matters, resolve these independently wherever possible, and escalate contentious, high-exposure or precedent-setting matters to the Head of QICA with a clear recommendation.

Be part of an extraordinary story

Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make. You’ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future and build the life you want while being part of an international community.

Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what’s never been done before.

Together, everything is possible

Qualification

• High School / Diploma or Equivalent with minimum 5 years of job-related work experience or Bachelor’s Degree or Equivalent with minimum 4 years of job-related work experience.

Job Specific skills/ Essentials

• Working knowledge of third-party risk and risk management frameworks and standards, including but not limited to COSO, ISO 31000, ISO 27001, and recognized third party risk practices,

• Practical understanding of due diligence evidence (audited financials and credit reports, SOC 2 / ISO certifications, DPIAs and data processing agreements, sanctions, PEP and adverse media screening, modern slavery and ESG disclosures).

• Experience in third party / vendor risk management, procurement risk, internal control, risk management, compliance or audit, with demonstrable depth in the execution and quality review of due diligence and risk assessments

• Experience of managing, coaching and quality assuring the work of others in a risk, control or assurance environment

• Professional certification in risk, audit, compliance or third party / vendor risk management (e.g. CRMA, CIA, CRISC, CTPRP) or qualified accountant with a Big 4 background and / or experience in a large, multinational organisation,

• Experience of operating or implementing a GRC / third party risk platform,

• Familiarity with contractual risk provisions, such as service levels, audit rights, liability, insurance, business continuity, termination and exit assistance, and the ability to work effectively with Legal and Procurement.

About Qatar Airways Group

Our story started with four aircraft. Today, we deliver excellence across 12 different businesses coming together as one. We’ve grown fast, broken records and set trends that others follow. We don’t slow down by the fear of failure. Instead, we dare to achieve what’s never been done before.

So, whether you’re creating a unique experience for our customers or innovating behind the scenes, every person contributes to our proud story. A story of spectacular growth and determination. Now is the time to bring your best ideas and passion to a place where your ambition will know no boundaries and be part of a truly global community.