Lilly Third Party Management Office (TPMO) Analyst, Third Party Risk Management (TPRM) in Petaling Jaya, Malaysia
At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our 35,000 employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.
At Lilly, we make a difference for people the world over by discovering, developing and delivering medicines that help people live longer, healthier and more active lives.
GBSKL established in March 2011 to gain efficiencies in areas such as General Accounting, Purchase to Pay and Order to Cash, the GBSKL quickly excelled in its financial mandate, allowing the leadership to ask, how can we apply these processes to other areas of the business. And so the GBS we have today was born, still leading in finance, but also evolving and expanding into diverse Business Service functions including Global HR Data Management, Medical Information, Trial Capabilities, and more to come on stream in 2021.
Lilly works with an extensive network of third party organizations to perform a vast range of activities across the enterprise. Known internal risks that impact Lilly such as privacy, information security, compliance, pricing, IT, etc. are amplified or compounded with the use of third parties. Today, third party oversight is decentralized at Lilly. There are many functions working with third parties in some capacity including, but not limited to: Procurement, Third Party Management Organizations (TPMOs), Risk Domain Partners including Audit/Assessment Teams.
The TPRM organization is implementing a holistic program to support consistent, efficient, and effective decision making and determining potential inherent risk. The central team’s scope encompasses priority business and risk areas across all stages of the third party collaboration lifecycle.
Successful execution of this strategy will reduce third party risk, strengthen capabilities, drive consistency and efficiency, and reduce cost.
The scope of the TPRM hub team will include the following:
Create and maintain policies, procedures, and training to drive consistent TPRM for third party use. Liaise with Risk Domain Partners to create and maintain Risk Definitions, Tolerances, and Required Training for TPMOs, Engagement Owners, and Third Parties. Construct and own the overall TPRM Program. Own the enterprise TPRM technology solution. Provide oversight of the TPRM initial and on-going monitoring due diligence processes. Report progress and results to Senior Leadership including, but not limited to, the CPO, the SVP of Ethics & Compliance, and the Compliance & Enterprise Risk Management Committee (CERMC).
The TPMO serves as first line of defence support responsible for using their risk management expertise coupled with business insights to enable Engagement Owners (EOs), Relationship Owners (ROs) and Functional Owners (FOs) to effectively manage third parties and associated engagements in accordance with TPRM Program guidance.
Assist in the completion of IRQ’s (Inherent Risk Questionnaires) as required
Review intake form / IRQs of third-party engagements and provide feedback or challenge as appropriate
Establish and maintain strong working relationships with RO/FO/EOs and relevant functional stakeholders
Assist in supplier qualification process for contracting
Coordinate, in conjunction with Risk Domain Partners, due diligence and ongoing monitoring activities
Provide onboarding support of EOs including training
Support EOs with ongoing operational oversight and finding management actions
Review findings and partner with engagement owner to track and close
Consult with engagement owners on mitigation approach
Review residual risk determination
Act as consult to RO/FO/EOs to establish third party performance indicators and governance
Assist with remediation of underperformance or operation findings on request
Develop and document third party specific exit strategy
Support EO in executing termination and off-boarding activities
Provide platform / mechanism for third parties to provide feedback on experience with Lilly
Provide knowledge management platform / mechanism to disseminate previous EO experiences with third parties to inform future outsourcing decisions
Provide functional governance through TPMO Council leadership
Participate in TPRM Steer Committee and Operations committee as required
Lead third party inventory management for respective business units
Drive business operations reporting and dashboards to allow for oversight and enhanced decision making
Partner with Procurement to inform sourcing strategy for business unit
Partner closely with the TPRM Hub to evolve and expand Lilly’s third-party management capabilities
Improve operational efficiency and optimize value by driving synergies across the third-party base
Act as an escalation point / TPRM communications touchpoint for Relationship, Functional and Engagement Owners
3+ years Third party management experience
Familiar with Aravo or similar Third-Party Risk Management technology
Experience in a fast-paced working environment
Strong technical and data analytical skills
Proven ability to frame clear choices and achieve quick wins
Proven experience influencing constituents without formal authority to adopt improvements, changes to status quo
Proven track record delivering outstanding results in challenging business environments
Strong communication and influence skills
Possesses strong business acumen (understanding how our industry operates, our value chain, our customers, industry dynamics, other)
Resourcefulness in knowing where to find experts; having an awareness of how things get done
Demonstrates credibility and engenders trust by bringing objectivity to all situations
Able to work effectively at all levels of the organization with a full range of styles
Eli Lilly and Company, Lilly USA, LLC and our wholly owned subsidiaries (collectively “Lilly”) are committed to help individuals with disabilities to participate in the workforce and ensure equal opportunity to compete for jobs. If you require an accommodation to submit a resume for positions at Lilly, please email Lilly Human Resources ( LillyRecruitingCompliance@lists.lilly.com ) for further assistance. Please note This email address is intended for use only to request an accommodation as part of the application process. Any other correspondence will not receive a response.
Lilly does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.
At Lilly we strive to ensure our employees are part of a team that cares about them and our shared purpose of making life better for those around the world. How do we do this? We continue to look for ways to include, innovate, accelerate and deliver while maintaining integrity, excellence and respect for people. We hope that you seek to join us on our journey as we create medicine and deliver improved outcomes for patients across the globe!