Head of Procurement and Third-Party Risk
Community Financial System, Inc.
Job Description
Job Description
Overview
At Community Financial System, Inc. (CFSI), we are dedicated to providing our customers with friendly, personalized, high-quality financial services and products. Our retail division, Community Bank, N.A., operates more than 200 customer facilities across Upstate New York, Northeastern Pennsylvania, Vermont and Western Massachusetts. Beyond retail banking, we also offer commercial banking, wealth management, investment management, insurance and risk management, and benefit plan administration.
Just as our employees are committed to helping our customers manage their finances, we’re committed to our employees. After all, they make it happen for our customers every day.
To ensure our people can enjoy long and successful careers here at CFSI, we offer competitive compensation, great benefits, and professional development and advancement opportunities. As an equal-opportunity workplace and affirmative-action employer, we celebrate and support a diverse workplace for the benefit of all: our employees, customers and communities.
Responsibilities
The Head of Procurement is a strategic leadership role responsible for developing and executing the organization’s procurement strategy, ensuring the cost-effective acquisition of goods and services while maintaining high standards of quality, service, vendor performance, third-party risk management, and regulatory compliance. This leader will serve as an enterprise partner across business, compliance, legal, finance, risk management, and operational stakeholders to ensure supplier relationships deliver value while protecting the organization from operational, financial, and regulatory risk.
The ideal candidate is a commercially astute procurement executive who can balance strategic sourcing, supplier partnership, governance, regulatory compliance, and third party risk mitigation. This individual will bring strong judgment, executive presence, disciplined vendor oversight, deep contract negotiation capability, third party risk assessment and a demonstrated ability to build cross-functional alignment in a regulated financial services environment.
Essential Duties:
Strategic Procurement Leadership
- Develop and execute a comprehensive procurement strategy aligned with enterprise priorities, business needs, and financial stewardship objectives.
- Establish procurement policies, procedures, and governance frameworks that support accountability, transparency, and regulatory readiness.
- Partner with senior leaders and business stakeholders to assess current and future procurement needs and identify opportunities to improve efficiency, reduce cost, and strengthen supplier performance.
- Use spend analysis, market intelligence, and performance data to inform sourcing decisions and strategic recommendations.
Vendor Management
- Establish, maintain, and strengthen relationships with key suppliers, service providers, and strategic business partners.
- Oversee supplier selection, evaluation, onboarding, contract negotiation, renewal, and offboarding processes.
- Ensure vendors meet the organization’s expectations for quality, service, pricing, operational delivery, and compliance with applicable requirements.
- Monitor vendor performance against established metrics, service-level expectations, key performance indicators, and contractual commitments.
- Lead issue escalation and remediation efforts when vendor performance, service continuity, or compliance expectations are not being met.
- Promote supplier accountability, continuous improvement, and relationship management practices that support sustainable long-term partnerships.
Third-Party Risk Management
- Play a leadership role in assessing risks associated with third-party vendors, including financial stability, operational resilience, regulatory compliance, cybersecurity, privacy, and service continuity considerations.
- Ensure appropriate due diligence is conducted for new and existing vendors to confirm alignment with the organization’s risk management, compliance, and control expectations.
- Collaborate closely with compliance, legal, risk management, information security, finance, and business owners to ensure vendor and third-party relationships align with enterprise policies and regulatory expectations.
- Develop and support mitigation strategies for vendor-related risks, including contingency planning, remediation tracking, periodic reviews, and audit readiness.
- Maintain oversight of third-party risk documentation, governance routines, and monitoring practices to support transparency and defensible decision-making.
- Stay current on regulatory expectations and industry standards affecting vendor management and third-party risk in financial services.
Contract Management and Compliance
- Oversee the negotiation, administration, documentation, and renewal of vendor agreements.
- Ensure procurement contracts reflect favorable commercial terms, appropriate service expectations, risk controls, compliance requirements, and business continuity considerations.
- Partner with legal and compliance stakeholders to ensure contracting practices support internal policies and applicable regulatory standards.
- Maintain procurement documentation and controls to support audits, examinations, and internal governance reviews.
Financial and Cost Management
- Analyze organizational spending patterns and identify opportunities for savings, cost avoidance, consolidation, and improved value.
- Lead strategic sourcing initiatives and contract optimization efforts that deliver measurable business outcomes.
- Develop procurement metrics, dashboards, and reporting routines to monitor performance, savings, risk, and service quality.
- Balance cost discipline with quality, resiliency, compliance, and long-term business needs.
Leadership and Team Development
- Lead, mentor, and develop a high-performing procurement team with clear goals, accountability, and professional development plans.
- Foster a culture of ethical conduct, service orientation, continuous improvement, inclusion, and operational excellence.
- Build strong partnerships across departments to embed procurement discipline early in business planning and vendor decision-making.
- Influence executive and business stakeholder decision-making through clear communication, data-driven recommendations, and sound risk judgment.
Process Improvement and Technology Enablement
- Drive continuous improvement across sourcing, contracting, vendor management, reporting, and third-party risk processes.
- Leverage procurement technology, workflow tools, automation, analytics, and supplier management platforms to improve transparency and efficiency.
- Standardize procurement practices where appropriate while maintaining flexibility for business-specific needs.
- Identify emerging procurement trends and recommend pragmatic enhancements to improve organizational effectiveness.
Ancillary Duties:
As an integral member of the Risk function and organization, complete other duties as assigned.
Qualifications
Education, Training and Requirements:
- Bachelor’s degree in Business Administration, Finance, Supply Chain Management, Procurement, Risk Management, or a related field required.
- Master’s degree, MBA, or related advanced degree preferred.
- Professional procurement, supply chain, or risk certifications such as CPSM, CPM, CIPS, or equivalent credentials are preferred.
Skills:
- Enterprise mindset and executive presence, High integrity and ethical decision-making, Collaborative stakeholder leadership, Data-driven and practical problem solving, Change leadership and continuous improvement orientation, Talent development and team engagement, Strategic sourcing and procurement leadership, Vendor management and supplier performance oversight, Third-party risk management and regulatory compliance, Contract negotiation and commercial judgment, Spend analysis, metrics, and financial acumen, Procurement systems, analytics, and process improvement
Experience:
- Progressive procurement, sourcing, vendor management, or supply chain leadership experience, preferably within a regulated financial services environment for 8 to 10 years.
- Demonstrated experience leading complex vendor relationships, strategic sourcing initiatives, contract negotiations, and supplier performance management.
- Strong working knowledge of third-party risk management practices, including vendor due diligence, risk assessment, monitoring, mitigation, and audit readiness.
- Experience partnering with compliance, legal, finance, risk management, information security, and business stakeholders.
- Proven ability to deliver cost savings and process improvements while maintaining compliance, quality, risk discipline, and business continuity.
- High-impact leadership role with direct influence on enterprise procurement strategy, vendor performance, risk management, and financial stewardship.
- Opportunity to strengthen procurement governance, modernize vendor management, and enhance third-party risk practices across the organization.
- Collaborative executive environment focused on operational excellence, responsible growth, and sustainable business value.
$153k - $297k
...join our team.KPMG is currently seeking an Associate Director, Third-Party Risk to join our Global Operations Group which is part of KPMG... ...lifecycle in collaboration with Global Functions, Member Firms, Procurement, Risk, Legal, Information Security, and business...RiskContract workFor subcontractorH1bLocal area- ...regulations while proactively identifying and mitigating emerging risks.Reporting regularly to the Board of Directors, Risk Oversight... ...compliant.Vendor Relationships – Effectively manages assigned third parties to ensure adherence to bank policy, procedure and protocol....RiskTemporary workInterim role
$157.5k - $292.5k
Overview:Leads and redefines procurement as a strategic business partner, driving growth, operational excellence, innovation, risk management, and enterprise value realization. Oversees third-party spend, leads enterprise sourcing and supplier strategy, strengthens governance...RiskFull timeWork experience placement$25 - $30 per hour
...Analyst Aither Health is a healthcare solutions company offering a full suite of innovative products and services for third-party administrators and risk bearing entities such as self-funded employers, health plans and providers. We founded Aither to help disrupt this...Risk- ...and protect known and unknown assets. CloudSEK’s Contextual AI SVigil identifies software supply chain risks by monitoring Software, Cloud Services, and third-party dependencies. Key Milestones: 2016: Launched our first product. 2018: Secured Pre-series A...Risk
$107.5k - $179.1k
...Mortgage, and the associated operational, compliance, and technology risk environment. This role leads risk assessment, control... ...assigned domains, including key products, processes, portfolios, third‑party relationships, and supporting technology platforms.Stay current...RiskFull timeRemote workRelocation$150k - $297k
...help to build a better working world. Ethics, Compliance, and Risk Management (ECRM) supports our people in managing the risks... ...mitigation and monitoring activities involving aspects such as third-party management, technology governance, awareness, and policy formulation...RiskWork experience placementSummer holidayLive inLocal areaFlexible hours$154.7k - $257.9k
...Bank is seeking a strategic and innovative Head of Commercial Digital Channels Product to... ...Sales, Treasury Management, Operations, Risk, Compliance, Information Security,... ...lifecycle. Maintain strong governance and third-party risk management practices.Financial & Business...RiskFull timeWork experience placement$45 - $50 per hour
...senior leadership. # Identify, escalate, and resolve risks, issues, and program roadblocks. # Coordinate activities... ...obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving...RiskHourly payContract workRemote workFlexible hours- ...stay aligned with approved objectives and requirements.Monitor risks and performance: Identify potential issues, assess project variances... ...working effectively across business, technology, and third-party teams in a complex transformation environment.Minimum 1 year of...RiskContract workSecond jobRemote workWorldwide
$60 - $65 per hour
...Position Overview This role supports a major Enterprise Risk Management transformation centered around the bank's Archer platform... ...obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving...RiskHourly payContract workLocal areaImmediate startRemote workRelocation- ...responsibilities to evaluate program governance, project controls, risk management, schedule performance, quality management, and... ...assurance, or advisory environments. - Experience overseeing third-party vendors, systems integrators, or multi-vendor delivery programs...RiskMinimum wageContract workTemporary workWork experience placementRemote work
- ...leading care provider. CRNA plays a crucial role in providing all parties with a full understanding of how a procedure needs to be... ....Work environment may involve some exposure to hazards/physical risk.The pay range for this position is determined based on several factors...RiskFull time
- ...operates within an institutional framework of outside fund counsel, third-party service providers and an outsourced compliance function.... ...business. You will provide practical legal guidance, identify risks early, create scalable solutions, and help the company move quickly...RiskFull timeContract workFixed term contractWork at officeLocal areaRemote work
$89.6k - $149.3k
...management, regulators, internal/external audit and other interested parties; adherence to internal controls while ensuring the quality of... ...to department management.Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance...RiskFull time$123.6k - $206k
...classification, value assessment, and control design stagesDefine risk tiers and controls proportional to use case risk (e.g., low/... ...bias/fairness checks, and performance monitoringSet standards for third-party and open-source model vettingTarget State & Team BuildDefine...RiskFull time$139.7k - $232.9k
...disaster recovery testing, resilience assessments, and operational risk mitigation activities.Drive continuous improvement of... ...and platform engineering practices.Evaluate vendor platforms and third-party services to ensure reliability and operational readiness.AI & Modern...RiskFull time- ...Manager – Brands to lead end-to-end planning, procurement, supplier coordination, and delivery for branded products manufactured by third-party partners. Position Summary This... ..., and maintain clear reporting on risks and performance. Manage branded-product...RiskContract workWork at office
- ...provides independent, objective assurance to management and the risk and audit committees as to whether the framework of risk... ...understanding of risks and regulatory expectations relating to payments, third-party management, account servicing and operational resilience...Risk
$167.6k - $279.4k
...strategic and transformational cybersecurity leader to serve as Head of Cyber Defense Operations. This role is accountable for leading... ...enterprise. This leader will partner closely with Technology, Enterprise Risk, Compliance, Audit, Corporate Security, and executive leadership...RiskFull timeWork experience placementWork from home$100k - $140k
...Kinaxis Maestro, or similar tools.Strong analytical capabilities with the ability to interpret complex data, identify trends, evaluate risks and opportunities, and translate findings into actionable business recommendations.Advanced Excel and reporting skills; Power BI and...RiskFull timeRelocation packageFlexible hours$107.5k - $179.1k
Overview: Manage the first line of defense risk management responsibilities of the business unit in accordance with the Enterprise Risk Framework. Oversee the proactive identification, accurate assessment and reporting of risks impacting the business unit, including loss...RiskFull timeWork experience placement- ...direct report for Manufacturing, Engineering, Planning, Sales, Procurement and Quality Assurance with dotted line relationships for Finance... ...operations. ADDITIONAL SKILLS and QUALIFICATIONS Risk identification and management. Working with Union Personnel....RiskWork at officeLocal area
$85.8k - $143k
...onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week.Overview: Conducts comprehensive risk analyses, develops and implements risk mitigation plans, and actively contributes to policy improvement and compliance efforts....RiskFull timeWork experience placementWork from home1 day per week$50 - $59 per hour
...Job Title Pay rate - $50-$59/hr Skill Set: Enterprise Risk Management General Risk Appetite Risk ID Responsibilities: Formulate business requirements that drive implementation or enhancement of technologies to meet centralized control assessment...RiskTemporary work$116.4k - $194k
...level objectives, operational metrics, platform health indicators, and developer experience measurements. Drive platform governance, risk management, compliance, audit readiness, and security remediation activities in partnership with Cybersecurity and Risk functions....RiskFull timeContract workWork experience placement$77k - $202k
...AssociateJob Description & SummaryThe OpportunityAs an HCP Engagements - Managed Services - Health PLS, Senior Associate you will support risk and compliance work within our Business & Supply Chain Operations practice, helping clients navigate regulatory requirements and...RiskFull timeH1b$140k - $280k
...strong legal background and demonstrated experience analyzing conflicts of interest, advising on ethical issues, and supporting law firm risk management initiatives. The firm is seeking a candidate with at least five years of legal practice experience and a minimum of two...RiskTemporary workLocal area- ...work in planning, organizing, directing, and coordinating the risk management program. Directs insurance brokers, insurance carriers... ...submission process for all tenants, construction, design, procurement and service providers. • Maintains up-to-date knowledge of changes...RiskWork at officeLocal area
- ...Compliance Intern will work closely with the Compliance Manager and Corporate Integrity Department to support agency-wide compliance, and, risk management activities. This internship provides hands-on experience with healthcare and human services compliance, internal auditing...RiskInternshipWork at officeLocal areaFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Head of Procurement and Third-Party Risk. Be the first to apply!




