Third Party Risk Oversight & Challenge Associate

DTCC • Tampa, FL

3d • Hybrid

About The Position

The Associate, Third Party Risk Oversight & Challenge will support multiple functions in the second-line oversight of DTCC’s Third Party Risk Management program. This role will provide independent review, credible challenge, and risk insight across the third-party lifecycle, including due diligence, ongoing monitoring, control effectiveness, vendor incidents, contingent worker oversight, and resilience planning.

Requirements

• Minimum of 4 years of experience in Third Party Risk Management, Operational Risk, Vendor Risk Management, Internal Audit, Regulatory Risk, Compliance, or a related risk discipline; financial services or regulated industry experience preferred.
• Bachelor’s degree preferred or equivalent experience.
• Strong understanding of third-party risk regulatory expectations, operational resilience, control assurance, risk reporting, governance, and enterprise risk management frameworks.
• Experience providing independent oversight, credible challenge, control testing, risk assessments, or advisory support across third-party, operational, technology, resilience, or supplier risk programs.
• Strong analytical, critical thinking, written communication, executive presentation, and stakeholder influencing skills.
• Ability to maintain independence, objectivity, and credibility while driving accountability and practical risk outcomes.
• Deep understanding of third-party risk frameworks and lifecycle activities.
• Ability to balance objective challenge with trusted stakeholder partnership.
• Strong risk judgment, problem-solving, communication, and influencing skills.
• Proactive, execution-focused mindset with a commitment to continuous improvement and strong risk culture.
• Ability to manage multiple priorities and support concurrent workstreams with disciplined execution, sound judgment, and adaptability.

Responsibilities

• Provide independent oversight and credible challenge of third-party risk activities across due diligence, risk assessment, monitoring, remediation, termination, and compliance with internal and regulatory expectations.
• Develop independent risk opinions on significant third-party engagements, elevated-risk relationships, residual risk exposures, mitigation plans, and escalation needs.
• Execute control assurance reviews and targeted testing across key third-party risk processes, including onboarding, monitoring, issue management, contingent worker oversight, and resilience planning.
• Review material vendor incidents, service disruptions, cybersecurity events, and operational issues, including root cause analysis, remediation plans, and lessons learned.
• Conduct thematic and horizontal reviews to identify recurring issues, systemic risks, control gaps, concentration concerns, and emerging risk themes.
• Review and challenge exit strategies and contingency plans for critical and high-risk third-party relationships, including feasibility, recoverability, substitutability, and testing results.
• Prepare risk assessments, oversight reporting, and recommendations for senior management, risk committees, governance forums, regulatory examinations, and internal audits.

Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree