Senior Third Party Risk Manager

Job Description

Job Description

Position Summary:

The Senior Third-Party Risk Manager is responsible for the strategic oversight, governance, and continuous enhancement

of the Bank's Third-Party Risk Management (TPRM) Program. This role serves as the subject matter expert for third-party

risk and provides enterprise-wide leadership to ensure third-party relationships are identified, assessed, monitored, and

managed in accordance with the Bank's risk appetite, regulatory expectations, and strategic objectives. The Senior

Manager partners with business leaders, Risk Management, Compliance, Information Security, Legal, Operations, and

executive management to strengthen third-party risk governance, facilitate risk-informed decision-making, and drive

continuous program maturity. This position is responsible for program oversight, reporting, regulatory and audit support,

committee reporting, and strategic initiatives related to third-party risk management.

Essential Functions:

Program Governance & Strategy • Lead the Bank's Third-Party Risk Management Program, framework, and strategic

roadmap for continuous maturity. • Maintain TPRM policies, standards, procedures, and methodologies aligned with the

Bank's risk appetite and enterprise risk framework. • Monitor regulatory developments, industry trends, and emerging

risks, and recommend program enhancements. Risk Oversight & Advisory • Provide independent oversight and effective

challenge of business-completed risk assessments, and lead TPRM due diligence, risk ratings, control evaluations, and

ongoing monitoring. • Oversee third-party risk across the vendor lifecycle, from onboarding and contracting through

renewal and termination. • Advise relationship owners and business units on TPRM requirements and risk mitigation, and

facilitate approval of critical and high-risk relationships. Reporting & Governance • Develop KRIs, metrics, and

dashboards, and present third-party risk reporting to executive management, Risk Committee, and other governance

forums. • Escalate material risks, control weaknesses, and risk acceptance decisions in accordance with established

governance requirements. Regulatory, Audit & Examination Support • Serve as the primary subject matter expert for

regulatory examinations, audits, and independent reviews, coordinating timely responses and documentation. • Track

remediation of audit, examination, and program findings to ensure ongoing regulatory alignment. Cross-Functional

Leadership • Lead enterprise initiatives for TPRM governance, process improvement, and regulatory readiness in

partnership with Compliance, Information Security, Legal, Operations, ERM, Business Continuity, and business

stakeholders. • Provide training and guidance to relationship owners and stakeholders to promote a strong risk culture.

People Leadership • Lead, coach, and oversee one to two Third-Party Risk Analysts, setting priorities and performance

expectations. • Review analyst work for quality, completeness, and adherence to TPRM standards. • Develop team

capabilities through feedback, cross-training, and development, performance, and succession planning. Program

Administration • Oversee the vendor inventory, risk classifications, key vendor performance and service levels, and

TPRM documentation and records standards. • Perform additional duties and special projects as assigned.

Education and Experience:

Education • Bachelor's degree from an accredited four-year college or university in Business, Finance, Risk Management,

Accounting, Information Systems, or a related field. • Professional certifications such as CTPRP (Certified Third-Party

Risk Professional), CRCM (Certified Regulatory Compliance Manager), CISSP (Certified Information Systems Security

Professional) or similar certifications are preferred. Experience • Seven (7) or more years of progressive experience in

Third-Party Risk Management, Enterprise Risk Management, Compliance, Internal Audit, Information Security Risk,

Operational Risk, or a related risk discipline within the financial services industry. • Demonstrated experience managing

or leading Third-Party Risk Management programs within a regulated financial institution. • Experience supporting

regulatory examinations, audits, and issue remediation efforts. • Experience presenting risk-related information to senior

management and governance committees preferred. Knowledge, Skills, and Abilities • Strong knowledge of Third-Party

Risk Management lifecycle processes and industry leading practices. • Strong understanding of FFIEC, FDIC, OCC,

Federal Reserve, and other applicable third-party risk management guidance. • Knowledge of vendor due diligence

reviews, contract risk reviews, ongoing monitoring practices, and concentration risk assessments. • Strong knowledge of

SOC 1, SOC 2, independent assessments, and control evaluation methodologies. • Familiarity with Governance, Risk,

and Compliance (GRC) and Integrated Risk Management (IRM) platforms. • Strong analytical, risk assessment, and

problem-solving skills. • Excellent written, verbal, presentation, and executive communication skills. • Ability to influence

stakeholders and drive results across multiple business units without direct authority. • Ability to effectively prioritize

competing responsibilities in a dynamic environment. • Strong organizational skills and attention to detail. • Proficiency in

Microsoft 365 applications including Outlook, Excel, Word, PowerPoint, SharePoint, Copilot and Teams. • Positive

attitude, sound judgment, and commitment to continuous improvement.

Supervisory Responsibility:

This position has supervisory responsibilities.

Job Type:

This is a full-time, exempt position. Typical work hours are Monday through Friday, 8:00am to 5:00pm.

Travel:

No travel is expected for this position.