Compliance Officer Third Party Risk Management

Compliance Officer Third Party Risk Management

Unlock your potential with Dassault Systèmes, a global leader in Scientific Software Engineering, as a Compliance Officer Third Party Risk Management in Bangalore, Karnataka!

Our compliance function is responsible for ensuring that the company meets its regulatory and market-driven compliance obligations efficiently, consistently, and at scale. Working under the direction of the Compliance Program Office, with key stakeholders from R&D, IT, Procurement, and Legal, this role is responsible defining and implementing a Third-Party Risk Management Program.

As the Third-Party Risk Program Manager, you will work collaboratively with R&D, IT, Procurement, Legal teams to assess current supplier risk practices and design and implement a common risk management framework that is integrated into our enterprise-wide Governance, Risk and Compliance program.  

Role Description & Responsibilities:

• Define third-party risk management requirements based on applicable regulations, standards, and internal policies (e.g., ISO 9001, ISO 27x01, SOC 2, NIST, GDPR, NIS2, CRA, FedRAMP).
• Identify stakeholders and conduct a current-state assessment of existing third-party risk policies and practices
• Facilitate working groups to define a common risk management framework that is comprehensive without being overbearing driving consensus on policy, risk appetite, control ownership, and evidence collection

Program Management

• Build a program plan to manage objectives, scope, timeline, budget, workflow configuration, and integration with existing systems.
• Manage program status and progress and provide regular updates to key stakeholders and sponsors escalating issues and risks that threaten timeline, scope, or budget
• Identify and actively manage dependencies, risks, and conflicts across project workstreams and related projects
• Define and track program KPIs to measure status and progress and overall program value
• Serve as primary point of contact with workstream leaders, and other key stakeholders
• Manage the training and deployment TPRM program to operational teams

On-going program operations

• Monitor third-party risk metrics and report on program maturity, open findings, and remediation progress
• Track regulatory and industry changes and update the framework accordingly
• Support due diligence reviews, contract risk language, and escalations for high-risk vendors
• Provide training and guidance to stakeholders on third-party risk requirements and processes
• Serve as a point of contact for internal and external compliance audits
• Monitor and measure the value of the TPRM program and optimize it to achieve the greatest value