TPRM Governance, Reporting, and Controls Lead - Chief Risk Office

TPRM Governance, Reporting, and Controls Lead

The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open, just like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen. Bloomberg's Chief Risk Office (CRO) Department plays a critical role in supporting our businesses and operations around the world. We move quickly and thoughtfully to help address the risks that are inherent with being the world's leading financial news and information company. Our team is made up of talented and hardworking professionals who think creatively and work collaboratively in an open environment to deliver results, drive innovation, and solve difficult problems. Diversity and inclusion are essential to our success, and we strive to maintain an environment where our employees are empowered to make an impact. We also recognize the value of diversity and inclusion in cultivating a supportive workplace and the importance of giving back to our communities. The CRO team provides coverage of both Bloomberg's regulated entities and products, and Bloomberg's non-regulated products and services. Our focus is to address risks and related issues by providing risk management as a service, focusing on providing and delivering value to help businesses and departments thoughtfully incorporate risk into decision making. Vendor Risk Management (VRM) or third-party risk is part of the Chief Risk Office (CRO) and responsible for assisting Bloomberg departments and select subsidiaries of Bloomberg LP in the selection, assessment, mitigation, and continuous monitoring of risks introduced by vendors and other third-party service providers.

What's the Role? We are seeking a TPRM Governance, Reporting, and Controls Lead to design and implement data-driven solutions that enable and enhance Bloomberg's Vendor Risk Management program. This individual contributor role will focus on sourcing, integrating, and operationalizing internal and third-party data feeds to support automated risk identification, profiling, assessment, and continuous monitoring of vendor engagements - including owning and managing the Company's Critical Vendor analysis and reporting. You will work closely with risk assessors, technology teams, and cross-functional stakeholders to ensure data is leveraged effectively to drive insights, improve decision making, and strengthen Bloomberg's third-party risk posture.

We'll Trust You To:

• Data Strategy & Integration * Help define and own our Critical Vendor data-based methodology, as well as other key TPRM reporting frameworks. Establish and implement KRIs and KPIs across our vendor risk program. * Identify and source internal and external data feeds relevant to vendor risk domains (e.g., InfoSec, privacy, resilience, regulatory). * Design and implement data pipelines and integration workflows to support automated risk profiling, scoring and continuous monitoring. * Collaborate with technology partners to ensure data architecture supports scalability, accuracy, and timeliness of risk insights. * Maintain data dictionaries, lineage documentation, and governance protocols to ensure transparency and consistency.
• Analytics & Reporting * Develop dashboards and reporting tools that provide actionable insights into vendor risk exposure, trends, and performance. * Support thematic and engagement-level risk assessments with data-driven analysis and visualizations. * Partner with VRM leadership to define key performance indicators (KPIs) and metrics for program effectiveness. * Deliver executive-ready reporting that supports strategic decision-making and regulatory compliance.
• Collaboration & Enablement * Work with Vendor Risk Managers to understand and take ownership of our TPRM data needs and help translate business requirements into technical solutions. * Partner with Enterprise Risk, Compliance, and Legal teams to ensure reporting aligns with broader risk frameworks and obligations. * Monitor industry trends and emerging technologies to continuously improve data capabilities and analytics maturity. * Contribute to the development of training materials and documentation to support adoption of analytics tools across the VRM team.

You'll Need to Have: * Bachelor's or Master's degree in Data Science, Information Systems, Risk Management, or equivalent industry experience. * Extensive experience in vendor risk management and/or data analytics roles, with a focus on third party data integration and reporting. * Proficiency in data visualization tools (e.g., QlikSense, Power BI) and analytics platforms. * Experience with data engineering tools and languages (e.g., SQL, Python, ETL frameworks). * Familiarity with third-party risk domains and vendor risk assessment methodologies. * Understanding of regulatory requirements and frameworks (e.g., GDPR, DORA, NIST, ISO). * Excellent communication skills, with the ability to translate complex data into clear, actionable insights. * Experience working in cross-functional environments and managing multiple stakeholder priorities.

We'd Love to See: * Experience building automated risk scoring models or continuous monitoring solutions. * Familiarity with vendor risk platforms and tools (e.g., Archer, ServiceNow, SIG, VSAQ). * Knowledge of cloud-based data architectures and security practices. * Experience supporting regulatory audits or compliance reporting related to third-party risk.