Third Party Risk Management

What You'll Do: Manage ongoing risk monitoring activities across third-party vendors and external service providers, identifying emerging risks and potential control weaknesses. Assess vendor exposure across cybersecurity, operational, financial, regulatory, and business continuity risk areas. Investigate risk alerts, evaluate potential business impacts, and coordinate remediation efforts with internal stakeholders. Conduct third-party due diligence assessments, periodic reviews, and risk evaluations to ensure alignment with internal policies and regulatory expectations. Support risk reporting, governance initiatives, and improvements to vendor oversight processes, controls, and monitoring frameworks.

What You'll Need: 5+ years of experience in Third Party Risk Management, Vendor Risk, IT Risk, IT Audit, or a related discipline, ideally within financial services. Strong understanding of third-party due diligence, ongoing monitoring, risk assessments, and control evaluation methodologies. Familiarity with cybersecurity, information security, operational resilience, and business continuity risk concepts. Experience working with GRC platforms and vendor monitoring tools such as Archer, BitSight, Supply Wisdom, or similar solutions. Strong analytical, communication, and stakeholder management skills, with the ability to assess risks, communicate findings, and drive remediation activities.