Third Party Risk Manager

Augustus•New York, NY

1d•$150,000 - $250,000•Onsite

About The Position

The Third Party Risk Manager will own the day-to-day mechanics of the Third-Party Risk Management (TPRM) program. This role involves maintaining the vendor and partner inventory, managing relationships through onboarding and due diligence, coordinating Subject Matter Expert (SME) reviews, tracking Business Continuity Disaster Recovery (BCDR) posture for critical vendors, and managing the TPRM issues pipeline. The position is crucial for ensuring the smooth operation and continuous improvement of the TPRM program within a rapidly growing fintech company that is building a US bank from the ground up. The company is backed by significant investors and is regulated in Europe, with a focus on providing access to the US Dollar for international fintechs and non-US banks through a proprietary core banking system.

Requirements

Several years of experience in third-party/vendor risk management, procurement risk, compliance, or a related operational/governance function.
Comfortable managing due diligence and review cycles across multiple vendors, partners, and internal SME functions at once.
Strong organizational and documentation skills — inventories, DDQs, and trackers stay accurate under you, not just after you build them.
Working knowledge of, or strong ability to quickly learn, third-party risk concepts including due diligence tiering, BCDR/RTO/RPO, SLA monitoring, and issues management.
Comfortable working with Excel/spreadsheets and reporting tools.
In New York City, or ready to relocate.

Nice To Haves

Experience with GRC or TPRM platforms is a plus but not required.

Responsibilities

Maintaining the third-party inventory and running quarterly reconciliation against payment and contracting data.
Running new vendor and partner relationships through intake and onboarding processes.
Executing initial due diligence at onboarding and ongoing due diligence on a recurring schedule for existing relationships.
Tracking and coordinating third-party audit requirements and following up on findings.
Coordinating and tracking risk-based reviews with subject matter experts across Information Technology, Information Security, BSA/AML & OFAC, Compliance (Consumer & Regulatory), Credit, Finance, and Legal.
Collecting and tracking RTO & RPO assessments for critical vendors, and maintaining exit plans.
Extending due diligence downstream to critical fourth parties where required.
Administering and tracking due diligence questionnaires (DDQs) for both vendor and partner relationships.
Tracking service level agreements (SLAs) and monitoring performance against them.
Maintaining the TPRM issues log from identification through remediation and closure.
Supporting due diligence requests that come from partners and counterparties assessing Augustus.