Third-Party Risk Management (TPRM) Risk Analyst

<h3>Description:</h3> <p>The key objectives of the TPRM Program are to:&nbsp;</p> <ul> <li>Assess the risk of third-party relationships which drive the rigor of risk management activities both during the third-party onboarding and ongoing… ## What you'll do </h3> <p>Risk Assessment Validation &amp; Remediation</p> <ul> <li>Strong experience in managing the full lifecycle of a Third Party from Sourcing to Payment</li> <li>Independently validate inherent risk rating and Criticality designation for all third-party relationships with minimal intervention while proactively flagging any concerns to the TPRM Manager</li> <li>Review third-party provided information and documentation for all third-party relationships in accordance with TPRM assessment methodology, proactively flagging any gaps or follow-up questions</li> <li>Lead communication to third parties to remediate gaps for all High Risk and Critical third-party relationships, including documentation of remediation plans</li> </ul> <p>Reporting &amp; Trend Analysis</p> <ul> <li>Independently lead portfolio-level trend analysis, build leadership- and audit-facing reporting, and translate findings into risk-based recommendations</li> </ul> <p>Oversight &amp; Periodic Review</p> <ul> <li>Lead identification, tracking, and review of the adequacy of completion of SME reviews and assessments for all third-party relationships at onboarding with minimal oversight from manager</li> <li>Independently provide oversight of the periodic review process, including identification and escalation of higher-risk findings or gaps</li> </ul> <p>Mentorship &amp; Stakeholder Support</p> <ul> <li>Mentor the Associate TPRM Risk Analyst and support the TPRM Manager in audit and customer discussions</li> </ul> <h3> ## What you'll bring </h3> <p>Experience &amp; Education:</p> <ul> <li>7-10 years of experience in Third-Party Risk Management (TPRM) or Governance, Risk &amp; Compliance (GRC)</li> <li>Demonstrated experience performing substantive risk assessments and applying formula-based or quantitative risk methodologies</li> <li>Bachelor’s degree in a relevant field (Cybersecurity, Business, Information Systems)</li> <li>Certifications (at least one required): CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), CTPRP (Certified Third-Party Risk Professional), or CRVPM (Certified Regulatory Vendor Program Manager) up to or in process of Level V</li> </ul> <p>Technical &amp; Operational Proficiency:</p> <ul> <li>Proficiency with a well established TPRM platform, including the ability to interpret intake data, Data Level classifications, and inherent risk scoring logic</li> <li>Deep operational understanding of standard control frameworks ( ### Nist Sp 800 …

See the listing for full requirements.