Sr. Third Party Risk Analyst

Third Party Risk Management Analyst

Come join a dynamic team working for one of the leading regional banking brands in the nation! BankUnited is ranked as a top national "Most Trusted" company in the banking industry and #1 in the nation on the Top 100 Healthiest Workplaces in America. At BankUnited, we strive to "Go for More!" BankUnited is seeking a motivated, self-starting Analyst to join the Third Party Risk Management team. In this highly visible role, the Third Party Risk Analyst will be responsible for identifying, analyzing and influencing the management of third party risks across the organization. This individual must ensure that BankUnited's third party portfolio is properly evaluated, assessed, and managed to minimize risk exposure and risk impacts to BankUnited. This role will be part of Corporate Procurement - Third Party Risk Management, reporting to Third Party Risk Manager.

Essential duties and responsibilities include the following. Other duties and special projects may be assigned:

• Performs focused third party risk assessments of existing or new services and technologies, along with business counterparts and oversees risk assessments performed by junior analysts
• Communicates risk assessment findings to all levels of the organization and presents high and moderate risk findings in Third Party Advisory Group.
• Leads and executes design enhancements of Third Party Risk Management program, including updates to policy and procedures.
• Plans, coordinates, and leads onsite reviews of significant risk third parties.
• Coordinates the gathering of third party risk assessment data and prepares risk assessments for critical-related third parties as needed, to be published and communicated to stakeholders
• Credibly challenges information provided by the business line to ensure an accurate risk profile is captured for each third party relationship.
• Builds communication and escalation plans around third party risk management activities within the enterprise and with third parties.
• Influences third parties and business partners to ensure compliance with risk management policies, to include driving the completion of required assessments within determined SLAs
• Develops, monitors, and possibly executes third party remediation actions, mitigation and contingency plans when risks or events are identified
• Provides subject matter expertise to and collaborates with Legal, Procurement, Cyber Security, Finance, Compliance, Business Continuity Management and/or other risk functions to maintain an enterprise third party risk management program
• Gain full understanding of Management Information System ('MIS') configuration and acts as a subject matter expert on system functionality, identifying areas of improvement and leading projects to implement those improvements.
• Attends daily SCRUM calls, weekly system support calls for GRC platform ensuring any system issues or enhancements are communicated, addressed, tested, and implemented appropriately.
• Maintains documentation on system functionality and communicates any changes in system functionality to all impacted program stakeholders.
• Performs peer reviews of risk assessments performed by junior analysts.
• Maintains strong working relationships with individuals and groups involved in the Third Party Risk Management Program.
• Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.).
• Adheres to Bank policies and procedures and completes required training.
• Identifies and reports suspicious activity.

Education:

Bachelor's Degree in Business Management or a related field Or or 5+ years of third party risk management experience preferred

Experience:

• 5-7 years of work experience in Third Party Risk Management, Vendor Management, Risk Management, and/or Procurement, preferably in financial services required
• Previous experience with Supplier Information Management/GRC Systems, preferably Coupa and/or Hiperos preferred

Knowledge, Skills and Abilities:

• Ability to identify and assess the severity and potential impact of risks. Communicate risk assessment findings to business line owners outside the TPRM program in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Strong knowledge of regulatory requirements
• Strong oral/ written communication skills. Comfortable presenting the results of review and challenge to business line management and provide independent challenges when different views exist.
• An understanding of organizational mission, values, goals and consistent application of this knowledge.
• An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one's network within an organization.
• An ability to apply original and innovative thinking to produce new ideas.
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.
• An ability to effectively influence others to modify their opinions, plans or behaviors.
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Strong problem-solving and troubleshooting skills.
• Excellent interpersonal skills, to include strong verbal and written communication.
• Advanced skills in Microsoft suite (Excel, Word, Teams, PowerPoint, SharePoint)
• Professionalism: Adhere to BankUnited standards for conduct, grooming, and attire. Provide a positive and professional image both within the company and externally. Create a positive first impression

Additional Information:

• Candidates residing in locations within BankUnited's footprint may be given preference.