Role Summary

The TPO Portfolio Manager is responsible for supporting the end-to-end governance, oversight, and management of a portfolio of third-party supplier engagements. The role ensures compliance with Third Party Oversight (TPO) standards, regulatory requirements, operational resilience expectations, and internal risk management frameworks while enabling the business to safely engage, manage, and exit supplier relationships.

The position acts as a central coordination point between business owners, delivery managers, sourcing, legal, risk, compliance, technology, finance, and supplier management teams to ensure third-party relationships are effectively governed throughout their lifecycle.

As the TPO Portfolio Manager for Workplace Solutions, your main deliverables for the role are:

Portfolio governance & oversight: maintaining third-party supplier portfolio oversight from onboarding through termination; evidence of adherence to TPO standards/policies; ongoing portfolio health monitoring. Ensure compliance with applicable third-party risk and operational resilience requirements.

Supplier inventory & reporting: maintain accurate supplier inventories plus recurring portfolio reporting (metrics, management reporting, executive updates on supplier risk and portfolio performance).

Onboarding & due diligence package: coordinating onboarding activities, completing required risk assessments, documenting due diligence decisions/level-setting with stakeholders, and proof that required governance approvals were obtained prior to contract execution.

Cross-functional review coordination: documenting engagement and sign-offs/inputs across review teams (e.g., InfoSec, Privacy, Compliance, Architecture, Legal, and Financial Viability Assessment (FVA) stakeholders where applicable).

Contract lifecycle deliverables: support for negotiations/renewals/amendments/novation's/terminations; renewal calendar/tracking; proactive remediation or exit planning; coordination of supplier transitions (including M&A-/rationalization-driven changes).

Risk remediation & regulatory readiness artifacts: identified risks/control gaps and remediation actions; materials to support regulatory readiness activities, audits, and examinations.

Sub-Processor Obligations: fulfillment of EU and other regulatory requirements, plus contractual obligations, through maintenance of public-facing sub-processor listing.

Job Responsibilities:

Portfolio Governance & Oversight

• Manage a portfolio of third-party supplier engagements from onboarding through termination.

• Ensure supplier engagements comply with internal TPO standards, policies, and governance requirements.

• Maintain accurate supplier inventories and portfolio reporting.

• Monitor portfolio health, emerging risks, and remediation activities.

• Provide management reporting, metrics, and executive updates on supplier risk and portfolio performance.

Supplier Onboarding & Due Diligence

• Coordinate supplier onboarding activities and required risk assessments.

• Partner with business stakeholders to determine the appropriate level of due diligence.

• Facilitate engagement with Financial Viability Assessment (FVA), Information Security, Privacy, Compliance, Architecture, Legal, and other review teams.

• Ensure governance approvals are obtained prior to contract execution

Contract & Vendor Lifecycle Management

• Support contract negotiations, renewals, amendments, novations, and terminations.

• Ensure contractual obligations align with policy and regulatory requirements.

• Track upcoming renewals and proactively manage remediation or exit activities.

• Coordinate supplier transitions, acquisitions, mergers, and portfolio rationalization efforts.

Risk Management & Regulatory Compliance

• Identify, assess, and manage operational, compliance, cybersecurity, concentration, and resiliency risks.

• Drive remediation of identified control gaps and supplier-related findings.

• Support regulatory readiness activities, audits, and examinations.

• Ensure compliance with applicable third-party risk and operational resilience requirements.

Stakeholder Management

• Act as the primary point of contact for business owners and supplier stakeholders.

• Influence decision-making across multiple functional teams.

• Present risks, recommendations, and portfolio updates to senior leadership.

• Build effective relationships with internal and external stakeholders.

Sub-Processor Obligations Management

• Finance is responsible for the ongoing management of sub-processor relationships, overseeing a recurring process to ensure all contractual commitments are met.

• This includes monitoring compliance, updating records, and coordinating with other internal teams to maintain operational integrity

Required Qualifications

• Strong experience in Third Party Oversight, Vendor Management, Supplier Governance, Risk Management, or Operational Resilience.

• Knowledge of regulatory requirements affecting third-party relationships.

• Experience managing complex supplier portfolios and remediation programs.

• Strong contract governance and lifecycle management expertise.

• Ability to interpret risk assessments and due diligence outputs.

• Excellent stakeholder management, communication, and influencing skills.

• Experience producing executive-level reporting and presentations.

• Strong analytical, organizational, and project management capabilities.