Third Party Risk Management Specialist

• Facilitate Novartis  ongoing compliance with External-Party Management requirements outlined in Novartis policies and standards
• Execute common, standardized third-party risk management processes managed centrally by the EPRM including:
  • Gathering of documentation and third-party artifacts
  • Researching third-party information and inputting data into relevant repositories like TPRM database,
  • Sending third party questionnaire(TPQ) to vendors, liaising with the third party to complete it, and analyzing it  
  • Process returned questionnaires and interact with supplier in case of questions or issues
  • Validate the completeness of questionnaire responses and whether any required additional documentation has been submitted by the Third Party
  • Validate the questionnaire responses against the submitted additional documentation
  • Analyse and perform first pass review of questionnaires and additional documents, in particular for automatic no-go criteria and risk indicators
  • Coordinating with Risk experts to record documents,  and manage risk assessment timelines
  • Support definition and track provide remediation actions  
  • Execute vendor screening and summarize the output for the risk team
• Support management reporting activities as required
• Participate in training sessions in collaboration with country stakeholders
• Participate in country conference calls and risk reviews where required
• Coordinate and process TPRM assessments, along with on-boarding workflows for Third Parties requiring assessment
• Identify automation opportunities and promote a continuous improvements culture
• Become Subject Matter expert for the process and guide peers and juniors towards process excellence

Key performance indicators/Measures of success 

Time Management:

• Duration of the Remediation Process is in line with the timeframes defined in the Service SLAs
• Duration of the Operational Escalation Process is in line with the Service SLAs
• Duration of closing CAPAs/improvement plans in line within agreed timeframes

Process Performance:

• Increase number of Third Parties assessed as compared to targets (e.g. how many assessed within a defined timeframe)
• Clear reporting is available to understand the metrics governing EPRM Framework performance
• Decrease in the number of overdue CAPAs

Minimum Requirements:

• Ideally up to 5 years' experience in risk management
• Must have German speaking & writing ability
• Stakeholder management experience
• Good willingness to learn
• Good communication skills