Principal, Third Party Management Risk Lead

FIS

About The Position

As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS? About the role: The Principal, Third-Party Management (TPM) Risk Lead is a senior individual contributor who will lead day-to-day execution of the enterprise Third-Party Management governance framework—driving consistent policy implementation, regulatory alignment, and lifecycle controls across third-party and outsourcing arrangements. You will lead through influence across a highly matrixed organization, partnering with business units and control functions to deliver governance outcomes; the Head of Global Resiliency retains overall program accountability.

Requirements

15+ years of experience in Third‑Party Risk Management, vendor governance, operational resilience, or enterprise risk within a regulated environment (financial services, fintech, payments, or comparable).
Proven governance execution across policy, procedure, and regulatory alignment (including DORA and outsourcing requirements).
Demonstrated experience maintaining TPM policy/standards, coordinating governance forums, and enabling ongoing adherence to a consistent enterprise framework.
Demonstrated ability to enable TPM controls across the full vendor lifecycle (sourcing → contracting → onboarding → exit) by partnering with process owners to define requirements, checkpoints, and templates.
Track record supporting sourcing and negotiation with risk triggers/clauses and enabling exit/termination readiness through clear contract risk and obligation traceability aligned to TPM policy.
Senior-level stakeholder influence in a matrixed environment, with the ability to facilitate cross-functional outcomes and produce audit-ready governance artifacts and executive reporting.
Ability to influence and enable alignment across business units and control partners, delivering board/executive-ready governance outputs (e.g., charters, KRIs, operating cadence, policy attestation evidence) consistent with a centralized TPM model.

Responsibilities

Facilitate execution of the enterprise TPM governance framework (policies, standards, procedures, and operating rhythms) by partnering with stakeholders to align implementation to regulatory expectations (e.g., outsourcing requirements and DORA) and internal risk appetite.
Act as the central point of coordination for TPM policy adherence by providing guidance, facilitating issue resolution, and supporting consistent implementation across business units, Supply Chain, Legal, Risk SMEs, and other control partners.
Enable integration of TPM governance into the full third-party lifecycle (including sourcing, contract negotiation, onboarding, change management, and exit/termination readiness) by partnering with process owners to define requirements, templates, and checkpoints.
Support contract risk and obligation traceability by validating that required risk clauses, controls, and exit provisions are incorporated and by coordinating remediation when gaps are identified.
Enable the Head of Global Resiliency to run TPM governance forums and escalation mechanisms by coordinating inputs, synthesizing issues, and supporting exception handling and material risk decisioning.
Prepare and maintain audit- and regulator-ready governance artifacts, including policies, procedures, charters, KRIs, attestations, and evidence packages.
Enable TPM change management by developing stakeholder education, training, and communications that support adoption of the centralized model.
Coordinate the transition of TPM governance from the custom RMIS solution into Archer, partnering with stakeholders to support third-party performance management processes and controls.
Lead transition of program controls from RMIS, an internal developed solution, into Archer Partner with Reporting/Data and Vendor Performance leads to define measurable governance requirements and enable consistent reporting and management action.