AVP, Third Party Risk Manager

Position Overview

We are seeking a Third-Party Risk Management Officer to support the organization's enterprise-wide vendor risk program within the Second Line of Defense. This role is responsible for providing independent oversight of third-party relationships throughout the vendor lifecycle, ensuring compliance with regulatory expectations, internal policies, and risk management standards. Working closely with business leaders, Legal, Procurement, Information Security, Compliance, and Operational Risk, you will help identify, assess, monitor, and mitigate risks associated with vendors and service providers while driving continuous improvements to the organization's third-party risk framework.

Key Responsibilities

• Support the execution and ongoing enhancement of the enterprise Third-Party Risk Management (TPRM) framework, including policies, standards, and governance processes.
• Perform independent reviews of vendor risk assessments, due diligence, onboarding, ongoing monitoring, and offboarding activities.
• Ensure third-party risk activities comply with applicable banking regulations and internal risk management requirements.
• Partner with business stakeholders, Legal, Procurement, Compliance, Information Security, and Operational Risk to evaluate vendor risk and strengthen governance.
• Review vendor contracts and due diligence documentation to ensure appropriate controls related to information security, business continuity, regulatory compliance, and service delivery are in place.
• Monitor critical third-party relationships, track remediation efforts, and escalate emerging risks or control weaknesses when appropriate.
• Support regulatory examinations, internal audits, and the preparation of management reporting, risk metrics, and committee materials.
• Identify opportunities to improve processes, enhance oversight, and strengthen the overall third-party risk management program.

Qualifications

• Bachelor's degree in Business, Finance, Risk Management, or a related discipline.
• 4\+ years of experience in Third-Party Risk Management, Vendor Risk Management, Operational Risk, Procurement, Vendor Compliance, or a comparable function within a regulated financial institution.
• Experience working in organizations subject to U.S. banking or financial services regulatory oversight.
• Hands-on experience conducting vendor risk assessments, reviewing due diligence, supporting onboarding processes, and evaluating third-party controls.
• Familiarity with vendor lifecycle management, issue remediation, contract risk review, and ongoing monitoring.
• Experience preparing documentation and reporting for senior management, auditors, or regulatory examinations.
• Strong understanding of operational risk, cybersecurity, information security, business continuity, and regulatory compliance as they relate to third-party relationships.
• Advanced proficiency with Microsoft Office, particularly Excel, Word, and PowerPoint.
• Strong analytical, organizational, communication, and stakeholder management skills.