Analyst II, Third-Party Risk Management

Merrick Bank • South Jordan, UT

3d

About The Position

The Analyst II, Third-Party Risk Management supports the direction and coordination of the bank’s Third-Party Risk Management (TPRM) activities. The role identifies and assesses risks associated with current and prospective third parties, documents findings, and helps oversee third-party risk assessments and performance. The analyst partners with vendor relationship owners across the organization to obtain information needed for assessments and evaluates risks arising from outsourced activities, including options for controlling them.

The position also supports TPRM reporting for management, committees, and the board of directors; recommends improvements to assessment and coordination processes; adjusts procedures to regulatory changes; and creates and maintains TPRM operational procedures. The analyst must escalate suspected legal, regulatory, or policy violations and comply with the bank’s internal controls and applicable laws and regulations. Other duties may be assigned by the VP of Enterprise Risk Management and/or the reporting manager.

Requirements

• Bachelor’s degree in a business-related field, or four years of related work experience in lieu of education.
• Two years of related experience in Third-Party Risk Management.
• Strong analytical, system, writing, and communication skills.
• Experience with Microsoft Excel, Word, PowerPoint, and Visio.
• Industry experience and general knowledge of third-party risk management.
• Ability to establish and maintain effective working relationships at all organizational levels.
• Effective planning, time management, attention to detail, customer service, and problem-solving skills.
• Ability to work effectively under pressure, handle multiple assignments simultaneously, and work flexibly at a rapid pace under strict time frames.

Nice To Haves

• Additional experience in risk, audit, or internal control monitoring.
• Experience with a Governance, Risk and Compliance (GRC) system; Archer experience is a plus.

Responsibilities

• Identify and assess potential risks associated with current and prospective third parties, and prepare written summaries of findings using sources such as background checks, legal cases, business reports, complaints, news, and internet searches.
• Assist with oversight and coordination of third-party risk management activities, including oversight and performance assessments.
• Work with vendor relationship owners throughout the organization to obtain information needed for risk assessments, such as financial statements, audit reports, questionnaires, and policies.
• Assess in writing key risks arising from the Company’s outsourced activities and options for controlling those risks.
• Assist in preparing TPRM reports for management, committees, and the board of directors.
• Identify issues and recommend improvements to assessment and coordination processes.
• Adjust processes to comply with changes in the regulatory environment.
• Create and maintain operational procedures for TPRM processes.
• Escalate suspected violations of laws or regulations, and non-compliance with Company policies.
• Comply with the Company’s internal control policies and procedures and applicable laws and regulations.
• Communicate operational problems, code of conduct or legal and regulatory noncompliance, policy violations, or illegal acts.
• Perform other duties as assigned by the VP of Enterprise Risk Management and/or reporting manager.

Benefits

• Competitive pay, including a bonus target or variable pay incentive program.
• Medical, dental, and vision coverage.
• 401(k) plan with company match.
• Short- and long-term disability coverage.
• Wellness programs.
• Group life and AD&D insurance.
• Paid vacation, sick days, and bank holidays.
• Employee engagement activities, including Employee Appreciation Day, DEI Employee Resource Groups, corporate social responsibility, and service recognition.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level