Job Description
Corporate Vendor Management at Client & Co. is responsible for implementing a firm-wide, end-to-end vendor management process to maximize vendor performance and value. Corporate Vendor Management is responsible for the sourcing, onboarding, risk assessment, monitoring and offboarding of third-parties; and assists CLIENT in meeting regulatory and compliance requirements.
As a Senior Manager on the Risk and Controls team in Corporate Vendor Management (CVM), you are responsible for the leading and enhancing CVM s oversight of third-party vendors. In this role, you will follow a risk-based approach in executing a comprehensive third-party risk management framework, ensuring compliance with regulatory requirements, and mitigating potential risks related to vendor services in order to support business partners across the firm in the accurate, efficient, and complete assessment of their third-party vendors. The ideal candidate will have a strong background in risk management, vendor governance, and compliance within a highly regulated industry.
What you ll do:
" Execute a robust third-party risk management framework to assess, monitor, and mitigate vendor risks through risk assessment and oversight activities
" Consistently follow risk assessment methodologies to evaluate third-party vendors based on criticality, compliance, cybersecurity, operational resilience, and financial stability.
" Collaborate with cross-functional teams (e.g. Legal, Cybersecurity, Compliance, Finance) to ensure a holistic approach to risk.
" Drive completion of risk assessments and identify obstacles to contracting or continued relationships with third parties
" Ensure risk assessment reviews are thorough and confirm completion of due diligence prior to agreement signature
" Ensure that all activities and efforts are consistent with CLIENT policies and guidelines and in alignment with regulatory guidance
" Participate in the identification of policy and procedure adjustments to address the evolving risk environment and emerging risks related to third party vendors both onshore and offshore.
" Work on complex problems of diverse scope where analysis of data requires evaluation of a variety of tangible and intangible factors.
" Ensure third-party risk management practices comply with industry regulations, internal policies, and best practices.
" Stay updated on evolving regulatory landscapes affecting third-party risk and recommend necessary program adjustments.
" Establish risk mitigation strategies for high-risk vendors.
" Conduct regular risk reporting and escalate critical vendor risks to leadership.
" Leverage third-party risk management tools and technology to streamline all aspects of risk reporting.
" Drive automation and efficiency improvements in team processes.
" Develop and deliver brown bag risk discussions and quarterly risk awareness discussion for internal stakeholders.
" Responsible for adhering to third-party risk metrics supporting completeness, accuracy and timeliness of third-party risk activities
" Assists with acquiring data and providing information during Internal Audit Reviews and Regulatory Examinations
" Acts as an advisor to peers by applying broad range of knowledge, skills, and experiences within the area of risk expertise.
What you ll have:
" 7+ years professional experience ideally in vendor management, risk management, internal audit
" 2+ years of experience working in a highly regulated financial services environment
" Strong understanding of risk frameworks, regulations, and best practices.
" Excellent analytical, problem-solving, and decision-making skills.
" Strong leadership and stakeholder management abilities.
" Professional certification(s) applicable to risk management such as the CTPRP or CRVPM
" Ability to work independently with close attention to detail with a record of tracking and measuring results
" Demonstrated ability to handle ambiguity, while implementing new requirements
" Must be able to build positive relationships throughout the organization
" Knowledge of emerging vendor risks such as AI ethics, ESG risks, and geopolitical risk, digital assets.
" Knowledge of internal controls, financial/banking regulations, operational risk and/or vendor risk assessments.
" Excellent interpersonal, verbal and written communication skills
" Bachelor s degree or equivalent professional experience is required
" Proficiency in third-party risk management tools and technologies solutions.
" SAP Ariba (Cloud version) experience a plus but not required.
Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.