What are the responsibilities and job description for the Third Party Risk Analyst position at Federal Reserve Bank (FRB)?
Company Federal Reserve Bank of Boston The requirements for this position are local to Boston area candidate with proof of US citizenship or Permanent Residency and must have resided in the United States for at least the past three (3) years. The Third-Party Risk Management Analyst position will be a member of the Third-Party Risk Management organization within National IT.
This Analyst will be a part of a team responsible for assessing the information security practices and posture of new and existing third parties for the Federal Reserve System.
This role could have additional TPRM responsibilities supporting the identification, assessment, and mitigation of risks related to National IT’s managed third-party relationships. This position will leverage various sources of data to assess the security program and associated risk management practices of the Federal Reserve’s suppliers, highlight risks, and control gaps associated with the supplier’s security program, categorize the potential risks based on severity, and identify potential mitigation strategies.
The position is also responsible for translating the results of the analysis into a business consumable format and delivering those results to business, legal, and procurement teams to advise risk decisions. Additionally, the analyst will be responsible for identifying, performing, and tracking continuous monitoring activities to ensure that risks associated with active suppliers are appropriately managed and mitigated. This position will participate in cross-functional teams to address information security policy, vendor risk management, or compliance issues.
This position will determine best practices, suggest how to improve current practices, and monitor those practices. Key Responsibilities (including, but not limited to the following) :
- Conduct comprehensive third-party cyber security assessments utilizing a NIST-based framework; evaluate the security posture of third parties to identify vulnerabilities, gaps, and areas of non-compliance; and identify and recommend security controls, best practices, and risk mitigation strategies in alignment with industry standards and regulatory requirements.
- Generate detailed reports that provide in-depth analysis of assessment findings, including identified risks, control deficiencies, and recommended remediation actions for vendor engagements.
- Engage with customers and stakeholders to communicate assessment results, address security concerns, and collaborate on potential remediation actions for vendor engagements.
- Work as part of a cross-functional team to perform assessments on new and existing vendors to understand any potential threats to the Federal Reserve System, advising Federal Reserve stakeholders on any mitigations needed to reduce potential threats.
- Review and interpret results of vendor audit reports and attestations (such as SOC2 reports); identify deficiencies and areas for remediation and advise appropriate stakeholders on findings.
May conduct or coordinate periodic vendor audits, in collaboration with Vendor Managers, Internal Audit, and other internal teams as needed.
Assists in developing communications of these changes to impacted stakeholders. Education and Experience :
Experience developing and completing vendor risk assessments for enterprise-level vendor relationships.
Understanding of various risk and security certifications and attestations (SOC2, ISO 27001, etc.).
Familiarity with third party risk and governance concepts. Knowledge and Skills :
All candidates must undergo an enhanced background check and comply with all applicable information handling rules. The above statements are intended to describe the general nature and level of work required of this position.
They are not intended to be an exhaustive list of all duties, responsibilities or skills associated with this position or the personnel so classified.
While this job description is intended to be an accurate reflection of this position, management reserves the right to revise this or any job description at its discretion at any time. For this job, any offer of employment is contingent upon successfully passing a two-phase security screening.
The first phase consists of the satisfactory completion of a physical examination (including a drug screening), reference checks, and a security investigation consisting of credit and criminal history checks. The second phase, which might not be complete until after you begin working at the Reserve Bank, is an additional risk-based security screening determined by the risk rating of the position.
Depending upon the sensitivity of the position, this phase may include, and is not limited to, work and residency eligibility verification, and personal interviews with the candidate, references, and prior employers. All applicants must have resided in the United States for at least three (3) years. Full Time / Part Time Full time Regular / Temporary Regular Job Exempt (Yes / No) Yes Job Category Work Shift First (United States of America) The Federal Reserve Banks believe that diversity and inclusion among our employees is critical to our success as an organization, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool.
The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences. Always verify and apply to jobs on Federal Reserve System Careers (https : / / rb.wd5.myworkdayjobs.com / FRS) or through verified Federal Reserve Bank social media channels. Privacy Notice
