Job Description
We are seeking a highly experienced Third-Party Risk Management (TPRM) Business Process Consultant with strong functional expertise in ServiceNow TPRM/IRM to support AIG's migration from its legacy CBRA risk assessment platform to ServiceNow TPRM.
The ideal candidate will have extensive experience in third-party/vendor risk management, business process consulting, requirements gathering, and Agile delivery. This role requires someone who can lead stakeholder workshops, assess existing risk management processes, design future-state workflows, and translate business requirements into ServiceNow TPRM solutions.
Key Responsibilities
- Lead current-state discovery and analysis of existing third-party risk assessment processes within the CBRA platform.
- Evaluate risk tiering, country/category-based questionnaires, risk scoring, due diligence workflows, and remediation processes.
- Facilitate workshops with business stakeholders, risk management teams, and subject matter experts.
- Design future-state TPRM processes aligned with ServiceNow's out-of-the-box capabilities.
- Work closely with ServiceNow architects and technical consultants to translate business requirements into functional solutions.
- Gather and document business requirements, functional specifications, user stories, and acceptance criteria.
- Own requirements traceability, backlog prioritization, and design decision documentation.
- Support ServiceNow TPRM workflow design, questionnaire configuration requirements, vendor onboarding, and risk assessment processes.
- Lead business validation and coordinate User Acceptance Testing (UAT) with business stakeholders.
- Ensure delivered solutions meet business requirements, compliance expectations, and agreed process designs.
- Collaborate with distributed onshore/offshore teams throughout implementation, go-live, and hypercare.
Required Skills & Experience:
- 15+ years of overall professional experience, with substantial experience in business process consulting, risk management, or enterprise transformation.
- Strong expertise in Third-Party Risk Management (TPRM) / Vendor Risk Management (VRM).
- Hands-on functional knowledge of ServiceNow TPRM / Integrated Risk Management (IRM).
- Strong understanding of vendor risk tiering, due diligence, risk assessments, questionnaire management, issue tracking, and remediation.
- Experience with ServiceNow Questionnaire Designer, Flow Designer-driven workflows, Vendor Risk Workspace, and vendor portal capabilities.
- Proven experience leading business process discovery and future-state workflow design.
- Strong business analysis skills, including requirements elicitation, user stories, acceptance criteria, and requirements traceability.
- Experience facilitating workshops with senior business stakeholders and risk/compliance teams.
- Strong understanding of Agile methodologies, backlog management, and UAT processes.
- Excellent communication, stakeholder management, and documentation skills.
- Ability to work effectively with distributed onshore/offshore teams.
Preferred Qualifications:
- Experience migrating legacy third-party risk platforms to ServiceNow TPRM.
- Prior experience in banking, insurance, or other regulated financial services environments.
- Familiarity with SAFe / Hybrid Agile delivery methodologies.
- Experience supporting enterprise ServiceNow IRM implementations.
Project Overview:
The engagement involves migrating AIG's legacy CBRA third-party risk assessment application to ServiceNow TPRM.
The program follows a 28-week, seven-phase delivery model covering discovery, solution design, implementation, testing, go-live, and four weeks of hypercare.
The consultant will work with an approximately 11-member distributed team comprising solution architects, business process consultants, risk advisors, project management, ServiceNow technical consultants, QA, and organizational change management resources.
Experience:: 15+ Years