Sachin Singh

About Sachin Singh

Expert in Third-Party Risk Management (TPRM): With extensive experience in crafting and deploying third-party risk management frameworks, I specialize in optimizing vendor assessments, ensuring regulatory compliance, and strengthening operational resilience. My expertise spans leading platforms like Coupa Risk Assess, KY3P, and Archer, enabling businesses to achieve streamlined risk processes and robust cybersecurity measures. Proven Leader in Risk and Compliance: As a Certified Third-Party Risk Professional (CTPRP) and ISO 27001 Lead Auditor, I bring a strategic approach to governance, risk, and compliance (GRC). My track record includes implementing global TPRM programs, enhancing business continuity, and driving regulatory alignment across regions. I take pride in delivering measurable outcomes that align with organizational goals. Passionate About Driving Transformation: Beyond technical excellence, I am committed to fostering a culture of risk awareness and collaboration. By leveraging insights from data analytics and stakeholder engagement, I empower organizations to make informed decisions, enhance resilience, and unlock the true value of third-party relationships. Collaborating with multiple internal and external stakeholders, including second line of defence, procurement, IT, legal, compliance, and privacy, to develop risk assessment procedures and monitoring activities. Governance of third party and outsourcing risk management. Experience in performing audit on third party risk assessment activities performed by different global businesses and functions within HSBC on inherent risk assessment, residual risk assessment, sanctions, business continuity, information and cyber security assessments. Subject matter expert – providing risk domain specific guidance for third party Information Security Assessment, expertise in Cyber Security assessments including standards such as ISO27001, NIST, CSA-CCM, SOC-TSC, CIS, COBIT, PCI-DSS, OCC, FRB etc. Knowledge of technical domains and assessing vendors/third parties for Operational Resiliency, Network Security, Physical Security, Access Controls, Business Continuity, Disaster Recover, Regulatory and Compliance (GDPR/CCPA).

Experience

1. Vice President - Global Third Party Risk Management

   汇丰

   Jun 2021 — Present · Hyderabad, IN

   Driving global Third-Party Risk Management (TPRM) initiatives, including risk assessments (IRQ, RRQ), mitigation strategies, and exception processes across Europe, APAC, and MENAT regions. Expertise in designing and implementing comprehensive TPRM programs, encompassing frameworks, policies, and governance to manage critical third-party relationships. Key responsibilities include monitoring vendor performance through KPIs, KRIs, and risk metrics, overseeing contract management, and ensuring compliance with global standards. Strategic leadership in identifying third parties critical to business services, assessing vulnerabilities, and implementing remediation measures, with regular reporting to regulators.Collaborating with stakeholders, including 2LoD, procurement, executives, and IT teams, to align governance and compliance objectives. Contributions as a Subject Matter Expert (SME) in business continuity, physical asset security, and information and cybersecurity enhance the quality of risk assessments and audits. Engaged in promoting a culture of risk awareness through data-driven insights, trend analysis, and targeted training, enabling process improvements and operational resilience.

Education

• Indus Business Academy - IBA, Noida

  MBA in Marketing and International Business

  2008 — 2010

• Bundelkhand University

  Bachelor of Science - BS

  2005 — 2008

Skills

• Consulting
• Strategic Planning
• Crm
• Business Intelligence
• Business Development
• Pre-Sales
• Social Media Marketing
• Product Management
• Team Management
• Business Analysis
• Marketing
• Vendor Management
• Proposal Writing
• Customer Service
• Customer Relationship Management (Crm)
• Business Analytics
• Market Research