MMC

Senior Manager - Operations Management (GSP - Vendor Risk Management)

In short

Marsh is hiring a Senior Manager for Operations Management (Third Party Vendor Risk Management) in Pune, India, to lead the third-party/vendor risk management function. The role covers strategic risk management, vendor lifecycle oversight, risk monitoring and reporting, regulatory compliance (GDPR, HIPAA, DORA, SOC), audit coordination, and leading a risk team, requiring 8-10 years of experience with strong regulatory and stakeholder management expertise. This is a hybrid role requiring at least three office days per week at a global risk, reinsurance and insurance consulting firm.

Company
Marsh
Role
Marsh is seeking a Vendor Risk Management expert for the following position based in the Pune, India office.
Designation: Senior Manager - Operations Management (GS - Vendor Ops Third Party Vendor Risk Management)
Location: Pune, India
We will count on you to:
•Work with Senior Business/OPS leaders Quality and Governance experts
•An energizing culture to work in and exposure to tools and best practices
•Working with an energetic curious team of multi-disciplinary professionals
•Opportunity to contribute to Operational outcomes and make an impact
•Strategic Leadership: Develop and refine the third-party risk management strategy aligned with organizational goals and regulatory requirements.
•Risk Assessment & Due Diligence: Manage comprehensive risk assessments for high-risk vendors, including financial stability, cybersecurity, operational resilience, privacy/AI, compliance, and reputational risks.
•Policy & Framework Development: Establish, implement, and continuously improve policies, procedures, and standards for third-party risk management.
•Vendor Lifecycle Management: Oversee the entire vendor lifecycle, from onboarding and due diligence to ongoing monitoring and offboarding.
•Risk Monitoring & Reporting: Design and oversee the implementation of key risk indicators (KRIs), dashboards, and reporting mechanisms for senior management and risk committees.
•Regulatory & Industry Compliance: Ensure all third-party activities comply with applicable laws, regulations, and industry standards (e.g., GDPR, HIPAA, DORA, SOC, etc.).
•Stakeholder Collaboration: Partner with legal, procurement, compliance, IT, and other risk management functions to evaluate vendor risks and develop mitigation strategies.
•Third-Party Risk Program Oversight: Lead the third-party risk management team, providing mentorship, guidance, and performance management.
•Issue & Incident Management: Oversee the investigation and resolution of third-party risk incidents, including breach or compliance issues.
•Audit & Review: Coordinate internal and external audits related to third-party risk, ensuring timely remediation of identified issues.
•Training & Awareness: Promote a risk-aware culture through training programs, workshops, and communication initiatives.
•External Relationships: Manage relationships with external vendors, risk assessment providers, and industry forums.
What you need to have:
•Bachelor's degree with 8-10 years of experience. Masters preferred
•\>5 years of experience in third-party/vendor risk management, compliance, or related fields
•Deep understanding of regulatory frameworks, industry standards, and best practices related to third-party risk
•Proven experience managing complex vendor portfolios, including high-risk or strategic vendors
•Strong knowledge of cybersecurity, data privacy, operational resilience, and contractual risk mitigation
•Demonstrated ability to develop and implement risk management frameworks and policies
•Excellent leadership, strategic thinking, and stakeholder management skills
•Strong analytical, problem-solving, and decision-making capabilities
•Professional certifications such as Certified Third Party Risk Professional (CTPRP), Certified Risk Management Professional (CRMP), Certified Information Systems Security Professional (CISSP), or equivalent are highly desirable
What makes you stand out?
•Experience in highly regulated industries such as financial services, Insurance, or technology
•Familiarity with third-party risk management tools and platforms
•Understanding of Procurement functions such as Sourcing, Contracting, Vendor Operations and Buyer functions
•Ability to influence organizational culture and promote risk awareness
•Strong communication skills, capable of presenting complex risk issues to executive leadership
Why join our team:
•We help you be your best through professional development opportunities, interesting work and supportive leaders
•We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities
•Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being
Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective.
Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot