Third Party Management Risk Lead

New American Funding

21h•$65,000 - $80,000•Remote

About The Position

The New American Funding (“NAF”) Third Party Risk Management (TPRM) team is responsible for the governance and oversight of NAF’s third-party risk and for assessing the effectiveness of controls used to identify, monitor, and manage third-party risk throughout the third-party lifecycle. The Senior Risk Specialist – Third Party Management will report to the TPRM Risk Lead and play a key role in supporting, enhancing, and maturing the TPRM Program. This role incorporates select leadership and program-development responsibilities while remaining hands-on in execution. The Senior Risk Specialist will support risk assessments, due diligence activities (DDA), ongoing monitoring activities (OMA), and issue management across the full third-party lifecycle. This individual must be a strong communicator and multitasker who understands that different risk domains require tailored, risk-based management approaches to be effective. The role requires close collaboration with vendors, internal business partners, and fellow risk professionals to ensure a consistent, unified, and practical approach to third-party risk.

Requirements

College degree preferred
4+ years of experience in Third Party Risk Management, Vendor Management, or Risk Management within a regulated financial services or mortgage environment
Strong understanding of the full third-party lifecycle and regulatory expectations related to third-party risk
Working knowledge of eGRC and third-party risk management platforms
Experience with ticketing systems and workflow-based risk tools
Knowledge of key risk domains including, but not limited to: AML, Business Continuity, Compliance, Cyber Security, Financial, Human Resources, Privacy, Reputational, SSAE/SOC reporting, and Technology Risk
Demonstrated ability to apply risk-based judgment, recognizing that not all risk domains require the same management approach
Strong experience with ongoing monitoring activities, including oversight meetings, issue tracking, and exit strategies
Excellent written and verbal communication skills, with the ability to communicate effectively across technical and non-technical audiences
Strong organizational skills with attention to detail and adherence to deadlines
Proficient in Microsoft 365 (Outlook, Excel, Word, PowerPoint, Teams)
Ability to work independently while also being a strong team player
Proven ability to manage multiple priorities in a fast-paced environment

Responsibilities

Support all stages of the third-party lifecycle, including vendor intake, onboarding, inherent risk assessments, due diligence, ongoing monitoring, issue remediation, and offboarding
Assist in the implementation, enhancement, and ongoing administration of TPRM tools, workflows, and risk management platforms
Provide risk-based guidance to business units to support informed vendor selection and engagement decisions
Assist in the enhancement and maintenance of TPRM policies, procedures, standards, and governance documentation
Partner with other risk managers to support the development and use of a consistent risk taxonomy across risk domains
Contribute to the development and implementation of contract compliance and oversight activities
Assist in the development of dashboards, metrics, and reporting to support leadership, audit, and regulatory needs
Support program automation and process improvements to increase efficiency while maintaining strong risk oversight
Track and manage DDA, OMA, findings, and action plans through ticketing systems and risk management platforms
Conduct analysis to identify single-source dependencies, concentration risk, and vendor criticality
Build and maintain strong relationships with vendors and internal business partners to support timely issue resolution
Serve as a subject matter resource to junior risk specialists and support knowledge sharing across the team
Support audits, exams, and internal reviews related to third-party risk management