Analyst II, Third-Party Risk Management

Merrick Bank • South Jordan, UT

1d

About The Position

The Third-Party Risk Analyst II supports the Enterprise Risk Management team’s Third-Party Risk Management activities by identifying and assessing risks associated with current and potential third parties. The role helps coordinate oversight and performance assessments, works with vendor relationship owners to gather assessment materials, evaluates risks arising from outsourced activities, and recommends options for controlling those risks. It also supports management and committee reporting, including reporting to the board of directors, and helps improve assessment processes and maintain operational procedures as regulatory requirements change.

The position is responsible for escalating suspected legal, regulatory, or company-policy violations and complying with the Bank’s internal controls, laws, and regulations. It also communicates operational problems, policy violations, noncompliance, and illegal acts. Other duties may be assigned by the VP of Enterprise Risk Management and/or the reporting manager.

Requirements

• Bachelor’s degree in a business-related field, or four years of related work experience in lieu of education.
• Two years of related experience in Third-Party Risk Management.
• Strong analytical, system, writing, and communication skills.
• Experience with Microsoft applications, including Excel, Word, PowerPoint, and Visio.
• Industry experience and general knowledge of third-party risk management.
• Ability to establish and maintain effective working relationships at all levels within the organization.
• Effective planning, time management, attention to detail, customer service, and problem-solving skills.
• Ability to work effectively under pressure and handle multiple assignments simultaneously.
• Flexibility and willingness to work at a rapid pace under strict time frames.
• Compliance with the Bank’s internal control policies and procedures and applicable laws and regulations.

Nice To Haves

• Additional experience with risk, audit, or internal control monitoring.
• Experience with a Governance, Risk and Compliance (GRC) system; Archer experience is a plus.

Responsibilities

• Identify and assess potential risks involving current and prospective third parties, and prepare written summaries of findings based on sources such as background checks, legal cases, business reports, complaints, news, and internet searches.
• Assist with coordination and oversight of third-party risk management activities and related performance assessments.
• Work with vendor relationship owners throughout the organization to obtain information needed for risk assessments, including financial statements, audit reports, questionnaires, and policies.
• Assess in writing key risks arising from the Company’s outsourced activities and options for controlling those risks.
• Assist in preparing TPRM reports for management and committees, including the board of directors.
• Identify issues and recommend improvements to the assessment and coordination process.
• Adjust processes to comply with changes in the regulatory environment.
• Create and maintain operational procedures for TPRM processes.
• Escalate suspected violations of law or regulations and noncompliance with Company policies.
• Adhere to the Company’s internal control policies and procedures.
• Understand and comply with applicable laws and regulations, and communicate operational problems, code-of-conduct or legal and regulatory noncompliance, policy violations, or illegal acts.
• Perform other duties as assigned by the VP of Enterprise Risk Management and/or reporting manager.

Benefits

• Competitive pay, including a bonus target or variable pay incentive program.
• Medical, dental, and vision coverage.
• 401(k) plan with company match.
• Short- and long-term disability.
• Wellness programs.
• Group life and AD&D insurance.
• Paid vacation, sick days, and bank holidays.
• Employee engagement activities, including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, and service recognition.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level