Procurement & Purchasing Manager - Hybrid

Smart IMS•Westlake, TX

5d•Hybrid

About The Position

As a Corporate Vendor Management, you are responsible for implementing a firm-wide, end-to-end vendor management process to maximize vendor performance and value. Corporate Vendor Management is responsible for the sourcing, onboarding, risk assessment, monitoring, and offboarding of third parties; and assists Client in meeting regulatory and compliance requirements. As a Manager on the Risk and Controls team in Corporate Vendor Management (CVM), you are responsible for the leading and enhancing CVM's oversight of third-party vendors. In this role, you will follow a risk-based approach in executing a comprehensive third-party risk management framework, ensuring compliance with regulatory requirements, and mitigating potential risks related to vendor services in order to support business partners across the firm in the accurate, efficient, and complete assessment of their third-party vendors. The ideal candidate will have a strong background in risk management, vendor governance, and compliance within a highly regulated industry.

Requirements

7+ years professional experience ideally in vendor management, risk management, internal audit
2+ years of experience working in a highly regulated financial services environment
Strong understanding of risk frameworks, regulations, and best practices.
Excellent analytical, problem-solving, and decision-making skills.
Strong leadership and stakeholder management abilities.
Professional certification(s) applicable to risk management such as the CTPRP or CRVPM
Ability to work independently with close attention to detail with a record of tracking and measuring results
Demonstrated ability to handle ambiguity, while implementing new requirements
Must be able to build positive relationships throughout the organization
Knowledge of emerging vendor risks such as AI ethics, ESG risks, and geopolitical risk, digital assets.
Knowledge of internal controls, financial/banking regulations, operational risk, and/or vendor risk assessments.
Excellent interpersonal, verbal, and written communication skills
Bachelor's degree or equivalent professional experience is required
Proficiency in third-party risk management tools and technologies solutions.

Nice To Haves

SAP Ariba (Cloud version) experience a plus but not required.

Responsibilities

Execute a robust third-party risk management framework to assess, monitor, and mitigate vendor risks through risk assessment and oversight activities
Consistently follow risk assessment methodologies to evaluate third-party vendors based on criticality, compliance, cybersecurity, operational resilience, and financial stability.
Collaborate with cross-functional teams (e.g. Legal, Cybersecurity, Compliance, Finance) to ensure a holistic approach to risk.
Drive completion of risk assessments and identify obstacles to contracting or continued relationships with third parties
Ensure risk assessment reviews are thorough and confirm completion of due diligence prior to agreement signature
Ensure that all activities and efforts are consistent with Client policies and guidelines and in alignment with regulatory guidance
Participate in the identification of policy and procedure adjustments to address the evolving risk environment and emerging risks related to third party vendors both onshore and offshore.
Work on complex problems of diverse scope where analysis of data requires evaluation of a variety of tangible and intangible factors.
Ensure third-party risk management practices comply with industry regulations, internal policies, and best practices.
Stay updated on evolving regulatory landscapes affecting third-party risk and recommend necessary program adjustments.
Establish risk mitigation strategies for high-risk vendors.
Conduct regular risk reporting and escalate critical vendor risks to leadership.
Leverage third-party risk management tools and technology to streamline all aspects of risk reporting.
Drive automation and efficiency improvements in team processes.
Develop and deliver brown bag risk discussions and quarterly risk awareness discussions for internal stakeholders.
Responsible for adhering to third-party risk metrics supporting completeness, accuracy, and timeliness of third-party risk activities
Assists with acquiring data and providing information during Internal Audit Reviews and Regulatory Examinations
Acts as an advisor to peers by applying broad range of knowledge, skills, and experiences within the area of risk expertise.