Vendor Management Risk Associate

What you’ll do as a Vendor Management Associate

• Manage the Bank’s vendor lifecycle phases from planning, onboarding, ongoing monitoring, risk assessments, oversight monitoring and termination.
• Collaborate with business owners and other internal stakeholders to ensure vendor risks are properly identified and controls are in place to mitigate risk and minimize financial, regulatory, and reputational exposure.
• Effectively communicate and collaborate with business owners and support their third-party strategic initiatives.
• Liaise with cross-functional Subject Matter Experts, such as Information Security, Finance, and Sourcing, among others, to ensure vendor engagements are compliant with Bank policies and regulatory guidance.
• Analyze vendor risk assessment questionnaires, support vendor on-boarding, manage due diligence document collection, assist with contract negotiations, and manage all required ongoing monitoring efforts.
• Gather Service Level Agreements reports for review with business owners and risk managers for oversight meetings.
• Chair vendor oversight meetings with business owners, risk managers and vendors.
• Engage with business owners and other stakeholders to review vendor performance metrics and vendor scorecards.
• Perform other duties and special projects as assigned.

• Strong analytical mindset, able to manage risks both at the micro and macro levels.
• Firm ability to identify issues and work them to closure, including remediation and escalation where appropriate.
• Strong data analytical skills and understanding of MS Excel, MS PowerPoint, and Governance Risk Compliance system (GRC).
• Effective in response to shifting priorities and assignments and ability to meet deadlines and expectations.
• 3 years functional/professional experience required; 5-7 years preferred.
• Effective in delivering messages across a wide spectrum of individuals at Bank having varying degrees of technical understanding.
• Strong interpersonal skills in ability to establish relationships with internal partners to build consensus, and able to deliver various types of messages to internal and external parties.