Senior Manager Third Party Risk

FourLeaf Federal Credit Union•Town of Oyster Bay, NY

14h•$117,456 - $176,183•Remote

About The Position

As part of the 2LOD under Enterprise Risk Management, the Senior Manager of Third-Party Risk Management (TPRM) reports to the Vice President of Enterprise Risk Management and is responsible for the day-to-day oversight and development of the third-party risk program and analyst team. In collaboration with leadership, the Senior Manager develops, implements, and executes on the Third-Party risk program ensuring robust assessment and monitoring practices for the Credit Union’s portfolio of third-party relationships.

Requirements

Bachelor’s Degree or equivalent work experience. Field of study: Business Administration, Risk Management, Information Systems, or related field.
10+ Years Third-Party Risk, Technology Risk or Risk Management.
5+ years of people experience management.
Strong knowledge of vendor management practices, technology risk, SOC controls contract language, and contract management.
Strong knowledge of Third Party and Technology risk management frameworks, methodologies, and tools.

Nice To Haves

Certifications: Certified Third-Party Risk Professional, Certified Regulatory Vendor Program Manager, or equivalent is desired; or the willingness to obtain certifications within a reasonable period.

Responsibilities

Directly manage the third-party risk analyst team. Foster a team driven by service and efficiency through leadership and training, ensuring deliverables are accurate, timely and consistent with the established Risk program and strategic direction. Develop and execute a plan for individual and team education. Supervise activities to ensure adherence to policy, procedures, and regulatory requirements.
Collaborate with business leads, CUSO’s, external third parties, and internal subject matter experts including but not limited to Legal, Privacy, Information Security, and Compliance to conduct new and annual third-party risk assessments and performance reviews, ensuring business units understand how to measure and manage the risk associated with third-party relationships.
Prepare, develop, implement, manage, and maintain the credit unions’ risk Third-Party Risk framework including associated policies and procedures. Supports the Business Continuity Management team by providing valuable insight into the credit union’s third-party risk profile and dependences for testing preparation and incident management. Supports business units and leadership across the organization with vendor issues and correspondence.
Lead the TPRM team in the identification and evaluation of risks and controls associated the Third Parties such as cyber, financial, strategic, reputational, operational, and regulatory risk. Ensures the timely monitoring, maintenance, communication and record retention of all third-party risk assessments requirements (including contracts and due diligence information).
Ongoing monitoring, measuring and tracking of Third-Party key risk indicators (KRI’s) for trends and emerging risks. Works closely with leadership, business units, and external parties, to communicate risk-related issues with remediation recommendations.
Act as program lead in the development and management of Third-Party risk systems and support tools such as the GRC.
Prepare and present risk reports to senior management and the Enterprise Risk Management Committee highlighting key risk exposure, trends, and mitigation actions. Manage the preparation of the monthly, quarterly, annual, and ad hoc Third-Party Risk reports and presentations for Senior Management, Enterprise Risk Management Committee and the Board.
Act as the key support contact for the Credit Union’s exams, internal, external audits for Third-Party Risk matters.
Stay up to date on applicable regulations to ensure the organization's Third-Party risk management and practices align with regulatory requirements. Continuously monitor industry developments, best practices, and emerging risk management techniques to enhance the organization's third-party risk management capabilities.
Educate and train employees on third-party risk management principles, policies, and procedures to enhance risk awareness and promote a risk-aware culture.