Third-Party Risk Management Operations Associate 3638200

Job Description

Job Description

Be Part Of A High-Performing Team

Join the third-party management organization of a global financial institution where strong risk discipline supports safe, efficient business growth. This team sits within Procurement Operations and works directly with business owners and third-party providers to assess vendor relationships, identify inherent risk, and ensure appropriate due diligence is completed throughout the third-party lifecycle.

The environment is collaborative and fast-moving, with a strong emphasis on sound judgment, practical problem-solving, stakeholder partnership, and continuous process improvement. This role will join a small team where individual contributors are expected to understand their own workflow while also appreciating the upstream and downstream effects of third-party risk decisions.

What's In Store For You

• Engagement: W2 only (no C2C/1099)
• Hybrid: Jersey City, NJ or White Plains, NY.
• Expected onsite presence is generally one day per week, with occasional second days depending on team needs.
• Opportunity to deepen expertise across the full third-party risk lifecycle, including exposure beyond the role's primary inherent-risk responsibilities.
• Opportunity to improve existing processes, documentation, metrics, and workflow efficiency.
• The work is ongoing operational work rather than a finite implementation project, creating the potential for longer-term need beyond the initial contract period, although extension is not guaranteed.

How You Will Make An Impact

• Guide internal business owners through inherent risk assessments for new and existing third-party relationships.
• Review business responses critically and challenge information that appears incomplete, inconsistent, or misaligned with the vendor's actual services and risk profile.
• Assess vendors based on factors such as services provided, data exposure, operational importance, and other relevant inherent-risk considerations.
• Coordinate the progression of vendors through third-party risk and due-diligence workflows.
• Use enterprise GRC platforms to document assessments, track activities, manage workflow, and support risk classifications.
• Partner with business stakeholders, vendors, and adjacent risk teams to keep assessments moving within expected timelines.
• Manage periodic reviews and other recurring third-party management activities as needed.
• Follow established escalation protocols when business owners or vendors do not complete required activities.
• Create and refine practical procedures, guidance documents, and job aids that make repeatable processes easier for the broader team.
• Identify opportunities to simplify workflows, improve metrics, reduce unnecessary steps, and strengthen the overall third-party management process.

Are You an Experienced Third-Party Risk Professional Ready to Make an Impact?

• Approximately 5–7 years of relevant experience, with more experienced candidates considered when their background closely matches the role.
• Prior experience working within a bank or financial institution is required.
• Hands-on experience with third-party risk management, vendor risk management, vendor due diligence, or third-party management operations.
• Practical experience performing or supporting inherent risk assessments.
• Ability to assess and challenge business-owner responses rather than simply process information administratively.
• Experience with a GRC platform such as ProcessUnity, MetricStream, Coupa, Archer, or a comparable risk-management system.
• General familiarity with the U.S. banking regulatory environment, including organizations such as the Federal Reserve, OCC, and FDIC; deep regulatory expertise is not required.
• Strong Excel skills and comfort working with structured data and workflow information.
• Strong time-management skills and the ability to handle multiple active assessments in a volume-driven environment.
• Excellent communication and relationship-management skills, including the diplomacy to work effectively with demanding stakeholders.
• Strong initiative, curiosity, and willingness to question processes and suggest improvements.
• Experience writing procedures, guidance documents, or operational instructions is highly valued.
• A specific degree is not required when the candidate's professional experience clearly demonstrates the necessary expertise.