Compliance Officer Third Party Risk Management
Unlock your potential with Dassault Systèmes, a global leader in Scientific Software Engineering, as a in Bangalore, Karnataka!
Our compliance function is responsible for ensuring that the company meets its regulatory and market-driven compliance obligations efficiently, consistently, and at scale. Working under the direction of the Compliance Program Office, with key stakeholders from R&D, IT, Procurement, and Legal, this role is responsible defining and implementing a Third-Party Risk Management Program.
As the Third-Party Risk Program Manager, you will work collaboratively with R&D, IT, Procurement, Legal teams to assess current supplier risk practices and design and implement a common risk management framework that is integrated into our enterprise-wide Governance, Risk and Compliance program.
Role Description & Responsibilities:
- Define third-party risk management requirements based on applicable regulations, standards, and internal policies (e.g., ISO 9001, ISO 27x01, SOC 2, NIST, GDPR, NIS2, CRA, FedRAMP).
- Identify stakeholders and conduct a current-state assessment of existing third-party risk policies and practices
- Facilitate working groups to define a common risk management framework that is comprehensive without being overbearing driving consensus on policy, risk appetite, control ownership, and evidence collection
Program Management
- Build a program plan to manage objectives, scope, timeline, budget, workflow configuration, and integration with existing systems.
- Manage program status and progress and provide regular updates to key stakeholders and sponsors escalating issues and risks that threaten timeline, scope, or budget
- Identify and actively manage dependencies, risks, and conflicts across project workstreams and related projects
- Define and track program KPIs to measure status and progress and overall program value
- Serve as primary point of contact with workstream leaders, and other key stakeholders
- Manage the training and deployment TPRM program to operational teams
On-going program operations
- Monitor third-party risk metrics and report on program maturity, open findings, and remediation progress
- Track regulatory and industry changes and update the framework accordingly
- Support due diligence reviews, contract risk language, and escalations for high-risk vendors
- Provide training and guidance to stakeholders on third-party risk requirements and processes
- Serve as a point of contact for internal and external compliance audits
- Monitor and measure the value of the TPRM program and optimize it to achieve the greatest value
Qualifications:
- Bachelor's or Master's degree.
- 5+ years of relevant experience in compliance, risk management, or regulatory operations
- Experience working with a control framework tied to standards such as ISO 27001, SOC 2, ISO 42001
- Experience managing compliance requests or similar operational workflows end to end, including prioritization and cost-benefit analysis.
- Strong understanding of GRC frameworks and control models, and how new regulations map to existing controls.
- Process and operations management methodologies and best practices.
- Experience with: Process Management; Continuous Improvement / Process Improvement; Change Management; Stakeholder Management.
- Excellent English language communication skills, verbal and written.
- Proficient with Microsoft Office (PowerPoint, Word, Excel, Outlook, etc.).
- Familiarity with quality, security, privacy standards and their control requirements (e.g. ISO 9001, 27001, SOC 2, GDPR, FedRAMP, …)
- Relevant certifications (e.g. CRISC, CISA) — nice to have.
What is in it for you?
- Work for the one of the biggest software companies
- Work in a culture of collaboration and innovation
- Opportunities for personal development and career progression
- Chance to collaborate with various internal users of DASSAULT SYSTEMES and also stakeholders of various internal and partner projects
Inclusion statement
达索系统是推动人类进步的催化剂。我们为企业和个人提供协作虚拟环境,以畅想可持续创新。通过我们的3DEXPERIENCE平台和应用程序,创建现实世界的虚拟孪生体验,我们为遍布150多个国家、超过35万家各类规模和各个行业的客户带来了价值。加入我们由超过23,800名充满激情的成员组成的全球大家庭吧!
想了解更多?
访问我们网站的其他部分以了解更多信息。
在校生和毕业生
成为我们的一员 - 查看实习和工作机会。
您的应聘之旅
了解您的应聘之旅。
我们的文化和价值观
了解我们的文化和价值观。