Provided key TPRM 2nd line of defense review and challenge program requirements.•Reviewed and supported development of SOC 1 & 2 evaluation reports for high risk Third-Parties- Supported and challenged key first line stakeholders in developing Bank appropriate Complementary User Entity Controls, and facilitated subsequent SME reviews and approvals•Performed effective review and challenge of all required key artifacts for third-party engagement.•Managed the Bank’s process for identifying, reporting and closing third-party findings•Contributed to the design and configuration of the Bank’s new TPRM system (ProcessUnity) including designing and testing of selected new tools: intake, inherent risk questionnaire (IRQ) and SIG-based control survey