Third Party Risk Manager

Responsibilities Include: 

Directly manages the third-party risk analyst team. Fosters a team driven by service and efficiency through leadership and training. Develops and executes on a plan for individual and team education. Supervises activities to ensure adherence to policy, procedures, and regulatory requirements.

Manages the Third-Party Risk Program including the RFI & RFP process.

Supports business units and leadership with vendor correspondence and concerns.

Ensures the timely monitoring, maintenance and communication of all third-party risk assessments requirements (including contracts and due diligence information) in VenderPoint.

Manages the third-party risk assessment program, and assists with the formulation of related tools, practices, processes, and methodologies.

Collaborates with business leads, CUSO’s, external third parties, and internal subject matter experts in the 2^nd Line of defense (Legal, Privacy, Enterprise Risk, Information Security, and Compliance) to conduct new and annual third-party risk assessments and performance reviews, ensuring business units understand how to measure and manage the risk associated with third-party relationships.

In collaboration with leadership, manages responses for internal and external audits/reviews of the Third-Party Risk Management Program.

Oversees the development of FourLeaf’s vendor diversity program and assists with identification of opportunities and implementation of processes to increase vendor diversity where possible.

Develops training and guidance for business units to support the Third-Party Risk Management Program.

Certifications:  Certified Third-Party Risk Professional, Certified Regulatory Vendor Program Manager, or equivalent is desired; or the willingness to obtain certifications within a reasonable period.