Sr. Third Party Risk Analyst

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Performs focused third party risk assessments of existing or new services and technologies, along with business counterparts and oversees risk assessments performed by junior analysts
• Communicates risk assessment findings to all levels of the organization and presents high and moderate risk findings in Third Party Advisory Group
• Leads and executes design enhancements of Third Party Risk Management program, including updates to policy and procedures
• Plans, coordinates, and leads onsite reviews of significant risk third parties
• Captures risk assessments for critical-related third parties as needed, to be published and communicated to stakeholders
• Burdens challenges information provided by the business line to ensure an accurate risk profile is captured for each third party relationship
• Builds communication and escalation plans around third party risk management activities within the enterprise and with third parties
• Influences third parties and business partners to ensure compliance with risk management policies, to include driving the completion of required assessments within determined SLAs
• Develops, monitors, and possibly executes third party remediation actions, mitigation and contingency plans when risks or events are identified
• Provides subject matter expertise to and collaborates with Legal, Procurement, Cyber Security, Finance, Compliance, Business Continuity Management and/or other risk functions to maintain an enterprise third party risk management program
• Maintains documentation on system functionality and communicates any changes in system functionality to all impacted program stakeholders
• Performs peer reviews of risk assessments performed by junior analysts
• Maintains strong working relationships with individuals and groups involved in the Third Party Risk Management Program

EDUCATION AND EXPERIENCE

• Bachelor's Degree in Business Management or a related field, or 5+ years of third party risk management experience preferred
• 5-7 years of work experience in Third Party Risk Management, Vendor Management, Risk Management, and/or Procurement, preferably in financial services required
• Previous experience with Supplier Information Management/GRC Systems, preferably Coupa and/or Hiperos preferred