Enterprise Partnerships Richardson-Analyst-Vendor Management (TPRM)

Goldman Sachs•Richardson, TX

About The Position

Enterprise Partnerships Vendor Risk Management directly supports core consumer products, including Apple Card and Savings, by actively executing vendor risk activities that protect customers, the firm, and our partners. This role works alongside the firmwide Third Party Risk Management (TPRM) function while remaining embedded in the day‑to-day needs of Enterprise Partnerships. This role is a hands-on vendor risk practitioner responsible for executing core Vendor Risk Management activities across the Enterprise Partnerships platform. Rather than functioning primarily as an oversight or reporting layer, the role actively manages risk remediation, issue analysis, remediation design, and ongoing risk reviews on behalf of the business—working in close partnership with Vendor Relationship Owners (VROs), Risk partners, Legal, and business leadership. The Analyst acts as an embedded risk partner, driving consistent, high-quality vendor risk outcomes while ensuring full transparency, alignment, and buy‑in from first line owners and senior stakeholders.

Requirements

Bachelor’s degree
Demonstrated Interest in Financial industry
Strong analytical, financial analysis, problem-solving, and project management skills
Highly motivated and results orientated
Self-directed team player, ability to drive high performance and work independently or in a collaborative team
Excellent communication skills, both oral and written
Good understanding of contract terms
Ability to manage multiple projects simultaneously and prioritize accordingly
Strong stakeholder management skills and an ability to influence across functions
Ability to work in a fast-paced environment and think clearly under pressure
Commitment to excellence and a high level of integrity
Proficient use of Microsoft Office Suite to include Word, Excel, Outlook, and PowerPoint

Responsibilities

Directly execute vendor risk management activities across the full third‑party lifecycle, including onboarding, periodic risk reviews, issue assessments, remediation planning, and ongoing monitoring—serving as a central driver of risk work rather than a passive reviewer.
Perform detailed risk assessments and control reviews in partnership with Risk, Legal, Compliance, and Technology teams, synthesizing requirements and translating them into clear, actionable remediation approaches for vendors and the business.
Own the development and quality of remediation plans, including defining risk‑appropriate solutions, validating effectiveness, tracking execution, and confirming sustainable closure—while maintaining alignment with VROs and business leadership.
Serve as a proactive risk advisor to VROs, reducing their operational burden by completing substantive risk work on their behalf, while ensuring VROs retain decision authority, awareness, and accountability.
Actively manage vendor-related issues and incidents, including impact analysis, root‑cause assessments, post‑mortems, and follow‑through to closure—coordinating across internal and external stakeholders as needed.
Review vendor contracts and directly summarize risk‑relevant provisions, control obligations, and gaps—partnering with Legal rather than routing contracts solely for review.
Maintain continuous visibility and alignment with VROs and senior business leadership through clear communication, structured checkpoints, and shared understanding of residual risk—without relying on repetitive follow‑ups or administrative escalation.
Escalate material risks, delays, or control gaps thoughtfully and early, framing issues in business‑relevant terms and presenting well‑defined options rather than open‑ended problems.
Enable informed risk ownership by the business, ensuring leadership has the context and data required to make risk decisions, rather than positioning Vendor Risk as a gatekeeper function.
Design, improve, and operate vendor risk tools and processes, with a focus on usability, efficiency, and reducing friction for VROs and partners.
Develop meaningful management reporting and dashboards that highlight actual risk posture, trends, and decision points—prioritizing insight over volume.
Establish and refine standards, playbooks, and escalation models aligned with regulatory expectations while remaining practical and execution‑oriented for the business.