Manager, Vendor Risk

Municipal Credit Union•New York, NY

7d•$87,500 - $116,550

About The Position

The Vendor Risk Manager owns, develops, implements, enhances, and maintains MCU’s vendor risk management frameworks, taxonomies, policies, and procedures. The Vendor Risk Manager administers MCU’s vendor risk management program, ensuring compliance with NCUA, NYDFS, and FFIEC requirements and protecting the credit union from third-party operational and compliance risks.

Requirements

Bachelor’s degree required, advanced degree preferred.
Minimum of 5 years of experience in the financial services industry required.
Minimum of 5 years of risk management experience, with demonstrable knowledge in third-party vendor risk.
Knowledge of operational risk management, regulatory compliance, general IT risk/IT operations, and financial industry business lines and workflows required.
Ability to perform in a high-volume environment and meet deadlines while maintaining exceptional attention to detail.
Technologically proficient.

Nice To Haves

Preferred certifications: Certified Third-Party Risk Professional or Certified Regulatory Vendor Program Manager.

Responsibilities

Lead the end-to-end Vendor Risk Management Program in alignment with regulatory requirements (e.g., NCUA, NYDFS, FFIEC) and internal policies.
Manage the vendor due diligence lifecycle including risk assessments, contracting support, ongoing monitoring, and offboarding processes.
Facilitate periodic reviews of critical and high-risk vendors, including SOC reports, financial health, cybersecurity practices, regulatory compliance, and performance metrics.
Collaborate with Enterprise Risk, Legal, Information Security, and business units to evaluate and mitigate vendor risks.
Provides subject-matter expertise to business lines on vendor selection, onboarding, and risk remediation.
Maintain the Vendor Risk Register and ensure vendor risk ratings are accurate and current.
Coordinate with internal audit and external examiners on vendor risk management reviews.
Develop and deliver periodic vendor risk reports to senior management and the Board, including risk exposure, trends, and performance metrics.
Monitor regulatory changes and industry best practices to ensure continuous improvement of the Vendor Risk Management Program.
Provide coaching and oversight to staff or cross-functional teams involved in vendor risk activities.
Perform other related duties as requested and special projects as assigned.