Freelance TPRM & Operational Risk Consultant F/M

Freelance TPRM & Operational Risk Consultant (Insurance)

Location: Brussels (hybrid)
Engagement: Freelance – Full Time

Mission

Strengthen third‑party risk management and operational risk frameworks, improve regulatory readiness, and enhance overall operational resilience. Deliver quick, pragmatic improvements with measurable impact.

Key Responsibilities

Third‑Party Risk Management (TPRM)

• Update TPRM policies, standards, and classification criteria.
• Strengthen lifecycle controls: due diligence, onboarding, monitoring, SLA oversight, incidents, and offboarding.
• Lead inherent/residual risk assessments, incl. concentration, subcontracting, and ESG.
• Conduct targeted due diligence (security, GDPR, resilience, compliance, financial viability).
• Support contract reviews (SLAs, RTO/RPO, audit rights, data requirements, exit/transition).
• Develop KRIs/KPIs, dashboards, and governance reporting.
• Improve or configure TPRM tooling and workflow processes.
• Set up criteria for incident escalation, DORA reporting, RCA, and remediation follow‑up.

Operational Risk Management (ORM)

• Strengthen RCSA, controls library, loss event capture, issues/actions, and risk appetite processes.
• Perform control design and effectiveness testing.
• Integrate TPRM with ICT/cyber resilience and BCP/DR frameworks.
• Prepare for internal audit and supervisory reviews with complete audit trails.