Director, Third Party Risk Management at NTT Ltd.

Want to be a part of our team?

The Director for Third Party Risk Management (TPRM) is responsible for NTT’s Group TPRM Principal Risk Program implementation in collaboration with relevant internal stakeholders. This should provide assurance to management and relevant internal and external stakeholders that standards, processes and systems are in place across the organization for transparent and effective risk management decision making in the ecosystem of NTT’s third party risk exposure.
The ideal candidate will have experience and a successful track record in implementing TPRM Programs at scale. They will advocate for the Program’s success and actively increase awareness of the importance and adoption of NTT’s TPRM framework, policies, standards and processes.

Working at NTT

Responsibilities

• Manage NTT’s TPRM Program roadmap and global implementation plan in accordance with defined strategic and organizational objectives.
• Provide thought leadership, expert oversight and direction to global stakeholders to drive the effective implementation and adoption of the global TPRM framework, policies and standards and tools across NTT.
• Develop, maintain and improve operating manuals, policies, guidelines and relevant program documentation to define clear roles and responsibilities and enable program outcomes within agreed timeframes.
• Regularly assess TPRM processes, procedures, tools, and technology integrations and drive associated improvements that optimize business outcomes, increase compliance, and enhance cross-functional insights.
• Collaborate with relevant stakeholders to monitor and interpret regulatory changes, industry trends, and best practices to ensure TPRM policies, standards and processes are up to date and fit-for-purpose.
• Collaborate with relevant functional and TPRM risk domain stakeholders to enable effective and efficient management, mitigation and monitoring of third party risks via standardized risk assessments, scoring, tolerance and thresholds within the ServiceNow platform.
• Partner with the NTT Digital Office team to advance TPRM ServiceNow capabilities, including automation to drive operational efficiencies and improve internal and third party digital user experience.
• Develop and implement a TPRM Program reporting framework to deliver accurate and meaningful program reporting.
• Implement a global training and communication plan of TPRM and oversee the execution of training and communication activities with key business partners across the organization.
• Work with relevant stakeholders to develop and oversee regular control risk assessments and compliance audits to identify areas of non-compliance. Monitor and report on key TPRM Program metrics, key performance and risk indicators to senior management and risk committees.
• Communicate and present TPRM Program updates in relevant governance councils and forums in accordance with the TPRM Execution Plan.

Skills and Experience:

• Bachelor’s degree in Business, Management, Information Systems, Information Technology, or other relevant field and / or certification.
• 5+ years of risk management experience, with a proven track record of designing and implementing effective TPRM programs, controls, and processes, ideally within a global ICT services organization or other relevant peer.
• Demonstrable experience of developing strong working relationships with cross-functional business areas and stakeholders to facilitate successful risk management within the Three Lines of Defense model.
• Ability to prioritize and direct limited resources to the most critical areas and issues; build solid, collaborative working relationships; and drive improvement initiatives with a sense of urgency.
• Strong program management skills and experience, with a track record in agile project management methodologies being advantageous.
• Exceptional analytical, problem-solving, and decision-making abilities, with keen attention to detail.
• Excellent communication and interpersonal skills, with the ability to influence and communicate complex concepts to a diverse audience.
• Proactive and adaptable mindset with the ability to thrive in a fast-paced and rapidly evolving industry and organization.
• Prior experience with implementing, managing and maintaining a ServiceNow TPRM implementation or experience with implementation of a similar TPRM or GRC tool.
• A good understanding of the different risk domains pertaining to third party risk management (e.g., Information Security, Data Privacy and Protection, Business Continuity Management, Health & Safety, Sustainability, etc.) and their unique requirements is advantageous.
• Excellent presentation skills and the ability to translate and document business, technology and compliance requirements simply and effectively.
• Ability to work independently as well as within a team composed of colleagues based locally and internationally.