Third Party Risk Analyst
About The Position
The Third Party Risk Analyst manages vendor issues and executes third-party assessments, building relationships with business leaders and vendors while providing challenging, evidence-based insight on business risk and the adequacy and effectiveness of controls. The role reviews assessments and provides opinions on vendor control environments in line with Citizens policies, identifies issues, and assists the business in agreeing on action plans to mitigate risk. The function provides business-function assurance regarding customer, financial, and reputational risks, and supports progress on remediation by applying findings and best practices across the bank.
Requirements
- Ability to navigate program requirements independently.
- Advanced critical-thinking skills and ability to identify opportunities and recommend solutions.
- Ability to manage multiple assessments and related activities appropriately.
- Strong verbal and written communication skills with internal and external stakeholders.
- Strong analytical skills to identify and classify inherent and residual risks.
- Ability to lead stakeholder calls effectively to achieve desired results.
- Experience in a financial services organization, particularly in Risk, Audit, Compliance, Cyber, or Third-Party Risk.
- Proficiency in Microsoft Word and Microsoft Excel.
- Experience gathering and analyzing evidence through methods such as email, virtual sessions, or onsite work, and sources such as artifacts, interviews, meetings, demonstrations, independent audits, and reviews of processes or policies.
- Must be authorized to work in the United States without the need for new employer sponsorship for themselves or their spouses now or in the future.
Nice To Haves
- Bachelor’s degree.
- Relevant industry certification(s), such as CISA, CRCM, CRISC, CTPRP, or TPCRA.
Responsibilities
- Evaluate third-party vendors’ control infrastructure and effectiveness, and obtain evidence of controls.
- Apply experience with audit, security, and regulatory frameworks, including ISO 27001, GLBA, SOX, PCI, HIPPA, state privacy regulations, and FFIEC.
- Assist with Governance, Risk, and Compliance (GRC) program design, process reengineering or enhancements, and applicable tool and technology implementations.
- Lead current and continual risk assessments, and develop risk metrics and visualizations.
- Work with business leaders to facilitate risk analysis and management, identify acceptable risk levels, and establish risk-management roles and responsibilities.
- Maintain and monitor the enterprise risk exception process to identify areas of noncompliance.
- Support and participate in regulatory examination preparation and execution, and remediation where applicable.
- Produce third-party vendor assessment reports that clearly communicate risks to varied audiences.
- Translate security risk and communicate it effectively to business partners.
- Travel within the United States.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
