What are the responsibilities and job description for the Manager - Third Party Supply Chain Risk position at AVANGRID MANAGEMENT COMPA?
- Provide strategic leadership and day to day direction to the third-party risk team
- Ensure risk is being managed throughout third party life cycle (planning, due diligence, contract, transition, on-going monitoring, and exit)
- Develop third party risk measures of success – metrics and reporting. Provide risk analysis and reporting for emerging risks and trends to senior leadership, and risk committees as appropriate
- Develop and maintain external relationships that will inform the ongoing program strategy
- Ability to interpret and determine the impact of third-party risks on the business areas
- Implement and maintain tool(s) to manage the TPRM program
- Ability to understand and communicate compliance and regulatory requirements
- Provide SME as it pertains to third party risk and questions posed by the Corporate Security team, business and/or other corporate populations
- Partners with BSLs (Business Security Liaison) for key third party risk initiatives
- Keeps current on regulatory requirements and obligations, best practices, guidance, and industry trends. Understanding potential impacts to the organization to support continuous process improvement
- Liaison with regulatory bodies, as required, Internal Audit, Legal and Compliance stakeholders.
- Participates in external industry expert forums, groups, and organizations, e.g., NY Joint Utilities working group.
- Other duties as assigned.
Skills and Requirements
Master’s degree with 4 years relevant experience or;
Bachelor’s degree with 5 years relevant experience
At least 4 years of experience in supply chain or third party/supplier or IT risk management
Successfully led, built, and evolved Third Party Risk Management Programs
At least 3 years of People Leadership experience
Preferences:
Expert level understanding the drivers of Third-Party Risk and experience building programs to identify, evaluate, and mitigate them
Certified Third Party Risk Professional (CTPRP)
Have successfully designed, obtained cross functional buy-in for, and implemented a system of segmenting the supply base by risk tier and applying appropriate processes and controls for each
Experience with risk methodology, risk analytics, defining Inherent and residual risk scoring & process
Working knowledge of the regulatory environment for utility companies within United States.
Knowledge of industry authoritative sources such as NIST, COBIT, SOC2, CSF, and ISO standards is a plus
Skills/Abilities:
Successfully develop and manage relationships with key internal stakeholders such as business area project managers, Information Security, Insurance. Risk, Legal, Procurement and Internal Audit leaders and teams
Ability to lead and influence cross-functionally at the Executive level and with cross-functional teams
Exceptional written/oral communication skills, including demonstrated experience building relationships at all levels of the organization, including C-Suite.
Strong understanding of Information Technology (IT) networking, cyber infrastructures, and operations technology environments.
Strong analytical skills to support assessment of risk and appropriate course of action
Ability to build effective relationships with key stakeholders locally and globally
Ability to interact at all levels of the organization
Mobility Information
Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country
Competencies
- Be a role model
- Be agile
- Collaborate and Share
- Develop Self & Others
- Empower to grow
- Focus to achieve results
- Technical Skills
Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within AVANGRD Network and Corporate functions. This does not include those that will work for Avangrid Renewables