Third Party Risk Management Officer
EFG · Zürich
General Info
Department: Group Risk – Third-Party Risk Management and Outsourcing
Work time Percentage: 100%
Location: Zurich
Our Company
EFG International is a global private banking group, offering private banking and asset management services. We serve clients in over 40 locations worldwide. EFG International offers a stimulating and dynamic work environment and strives to be an employer of choice. EFG is committed to providing an equitable and inclusive working environment that is founded on the principle of mutual respect. Joining our team means experiencing a supportive environment, where your contributions are valued and recognised. We strongly believe that the diversity of our teams gives us a competitive advantage by fostering better decision-making and greater innovation.
Our Purpose and Mission
Empowering entrepreneurial minds to create value – today and for the future. We are a private bank, offering personalised solutions on a global scale to private and institutional clients. Our sustainable success is based on our talents and on how we partner with our clients and communities to create lasting value.
Job Description
We are looking for an experienced Third-Party Risk Management (TPRM) professional to join our Group TPRM and Outsourcing function. In this senior role, you will be responsible for overseeing and driving the effective implementation, execution, and continuous enhancement of EFG’s Third-Party Risk Management framework across all relevant business divisions, legal entities, and geographies.
Reporting to the Head of TPRM and Outsourcing, you will provide both strategic and operational leadership across the TPRM portfolio (including intragroup arrangements) and lifecycle, ensuring consistent application of group-wide policies, standards, governance requirements, and risk management practices. You will have specific accountability for TPRM tooling and system governance, centralised issue and action tracking, portfolio oversight, and the monitoring of control effectiveness and remediation activities.
Acting as a key interface between Group TPRM, business and control functions, technology, procurement, operational risk, compliance, information security, and other relevant stakeholders, you will ensure that third-party risks are appropriately identified, assessed, monitored, escalated, and managed throughout the third-party lifecycle, in line with the Group’s risk appetite, regulatory obligations, and strategic objectives.
Key Responsibilities
- Lead the implementation and ongoing enhancement of the Group’s TPRM framework across the full third-party lifecycle, from initial risk classification and due diligence through onboarding, ongoing monitoring, periodic reassessment, and termination.
- Ensure consistent application of group-wide TPRM policies, standards, methodologies, procedures, and minimum control requirements across business divisions, legal entities, and key geographies, including intragroup arrangements.
- Maintain group-wide oversight of the third-party portfolio, providing clear visibility of critical and material Outsourcing and ICT third parties, inherent and residual risk exposures, and key risk concentrations.
- Design, develop, and maintain management information, dashboards, KPIs, and KRIs that enable effective monitoring of portfolio health, lifecycle adherence, remediation progress, and control effectiveness for senior management and risk committees.
- Establish and oversee a robust, centralised process for recording, tracking, and closing TPRM-related issues, findings, control deficiencies, and remediation actions arising from risk assessments, control testing, audits, regulatory reviews, and incidents.
- Own the functional governance of the Group’s TPRM tooling and supporting systems, including configuration, workflows, risk assessment methodologies, approval authorities, access controls, data standards, and reporting capabilities, in close collaboration with IT and data management.
- Coordinate responses to internal audit, external audit, regulatory reviews, and other independent assurance activities related to TPRM, ensuring timely, high-quality submissions and clear demonstration of framework effectiveness and auditability.
- Act as a senior point of coordination between TPRM and Outsourcing and key stakeholders such as Procurement, Operational Risk, Compliance, Information Security, Technology, Legal, Business Continuity, and regional/local TPRM teams to promote consistent implementation of group-wide requirements.
- Lead group-wide TPRM change and continuous improvement initiatives, translating strategic objectives into structured delivery plans, and driving execution to enhance efficiency, maturity, automation, and scalability of TPRM processes and governance.
- Analyse recurring issues, emerging risk trends, and thematic findings to identify systemic weaknesses, concentration risks, and critical service dependencies, and propose sustainable improvements to the TPRM operating model and control environment.
Requirements and Qualifications
Education
Minimum: University degree in finance, business, risk management, information systems, or a closely related discipline.
Preferred: Postgraduate degree and/or relevant professional qualifications in risk management, compliance, or governance.
Professional Experience
Significant experience (typically 8+ years) in third-party risk management, operational risk management, risk governance, or a closely related discipline within banking or another highly regulated financial services environment.
Proven track record in managing complex, cross-border third-party risk portfolios and operating within global stakeholder environments involving business units, control functions, procurement, technology, and regional risk teams.
Demonstrated experience in issue and action management, remediation oversight, control assurance, and closure of audit or regulatory findings.
Experience providing senior management reporting and supporting risk committees or governance forums.
Technical and Functional Knowledge
Strong understanding of the end-to-end third-party risk management lifecycle, including risk classification, due diligence, risk assessment, ongoing monitoring, remediation, and exit management.
Sound and up-to-date knowledge of relevant regulatory requirements and supervisory expectations related to Outsourcing, ICT third parties, and operational resilience in financial services.
Expertise in risk governance, management information, portfolio oversight, KPI/KRI development, and data-driven risk analysis.
Solid analytical and critical thinking skills, with the ability to challenge data and qualitative information and form independent, well-reasoned views.
Excellent communication skills, both written and verbal, with the ability to explain complex risk concepts in a clear, pragmatic, and business-oriented manner.
Proven experience overseeing TPRM platforms, workflow tools, system governance, data quality, and technology-enabled risk management processes is a strong advantage.
Collaborative mindset, with the ability to work effectively across cross-functional teams and build strong relationships with stakeholders at different levels of the organisation.
Languages
Fluent English (written and spoken) is required.
Additional languages commonly used within EFG’s locations (such as German, French, or Italian) are an advantage.
Our Values
Accountability: Taking ownership for tasks and challenges, as well as seeking continuous improvement.
Hands-on: Being proactive to rapidly deliver high-quality results.
Passionate: Being committed and striving for excellence.
Solution-driven: Focusing on client outcomes and treating clients fairly with a risk-aware mindset.
Partnership-oriented: Promoting collaboration and teamwork. Working together with an entrepreneurial spirit.
Please ensure to attach a cover letter to your CV when filling the application.
We are looking for an experienced Third-Party Risk Management (TPRM) professional to join our Group TPRM and Outsourcing function. In this senior role, you will be responsible for overseeing and driving the effective implementation, execution, and continuous enhancement of EFG’s Third-Party Risk Management framework across all relevant business divisions, legal entities, and geographies.