About this Associate, Third-Party Management role at AIA
Do meaningful work with us. Every day.
At Amplify Health, we’re looking for individuals with ambition, resilience and passion for healthcare, insurance, wellness and digital technology. As a fast-growing business with the ambition of making people and communities across Asia healthier, we have exciting career opportunities available to help us achieve our vision.
The position of Associate, Third Party Management (TPM) will support the Risk and Compliance team to achieve compliance and operational excellence in the area of Third-Party Risk management in alignment with internal policies as well as legal, regulatory and audit requirements.This role is responsible for working with cross-functional stakeholders across Sourcing, Legal, Finance, Information Security and business units to support comprehensive third-party operations including sourcing, onboarding, monitoring, renewal and offboarding of third parties.
Responsibilities
Sourcing and Contracting Operations
- Serve as the first point of contact for employees and contract owners regarding operational queries and procedures regarding sourcing operations.
- Collaborate with Sourcing and Legal teams to ensure that sourcing requests are raised and approved in alignment with contractual agreements and regulatory requirements.
Third Party Management (TPM) Operations
- Serve as the first point of contact for employees and contract owners regarding operational queries and procedures regarding TPM operations.
- Support contract owners and the Information Security team in submission of third-party onboarding or renewal requests and perform adequate third-party risk assessments and due diligence as required.
- Track and monitor existing TPM arrangements to ensure timely renewal or offboarding and remediation of identified risks and issues with the third party.
Third Party Risk Management and Compliance
- Support the implementation and uplift of third-party and sourcing risk management areas to comply with internal policies and frameworks.
- Track and report third-party risk management metrics to ensure accurate and timely reporting to senior management.
- Provide audit support and escalate any issues and risks timely in the areas of TPM and sourcing.
Training and Support
- Conduct and track third-party risk management and sourcing trainings with Contract Owners and managers.
- Develop adequate guidelines and training materials to support internal training requirements in the areas of third-party risk management and sourcing.
Candidate Profile
Experience and Qualifications
- Bachelor’s degree required; degree in Information Technology, Information Security or Risk Management or related fields preferred.
- 1 – 3 years of experience in IT risk management or audit, third party risk management or assessment, cybersecurity in a regulated industry (healthcare, insurance, fintech, etc.) preferred.
- Knowledge or experience of ISO 27001 certification and/or SOC 2 Type I/II assurance engagements.
- Certified in risk management or audit areas such as ISO 27001 Lead Implementer/ Auditor, CISA, CISM, etc.
Competencies & Core Characteristics:
We are seeking a leader who embodies the following competencies and characteristics essential for success in our scale-up environment:
- Cross-Functional Collaborator: Excellent stakeholder management, communication and collaboration skills, able to support and manage multiple engagements or projects concurrently.
- Attention to Detail: Meticulous attention and discipline in documentation to product quality paperwork used to fulfil legal and regulatory requirements.
You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.
