Vendor Risk Management Analyst
About The Position
The Assistant Vice President, Vendor Risk Management Analyst executes and enhances Apple Bank’s Vendor Risk Management Program and supports effective management of vendor relationships throughout the vendor lifecycle. The position independently identifies, assesses, monitors, reports, and facilitates mitigation of vendor-related risks. Working with business stakeholders and vendors, the Analyst supports risk management activities, vendor performance oversight, issue remediation, and initiatives involving new and existing service providers. The role uses independent judgment to evaluate vendor risks, challenge the adequacy of due diligence and ongoing monitoring, escalate material concerns, and recommend appropriate risk treatment. It also contributes to strengthening the Bank’s vendor risk framework, policies, procedures, systems, governance reporting, training, and regulatory readiness.
Requirements
- Bachelor’s degree required.
- At least 5 years of experience in vendor risk management.
- Strong organizational and administrative skills.
- Demonstrated attention to detail and documentation discipline.
- Experience evaluating vendor risks across operational, regulatory compliance, financial, cybersecurity, data privacy, business continuity, reputational, and fourth-party risk domains.
- Experience supporting audits, compliance reviews, vendor governance, or operational oversight activities.
- Excellent analytical and problem-solving skills.
- Excellent verbal and written interpersonal and communication skills.
- Ability to collaborate with all levels of the organization, from individual contributors to executive management.
- Ability to work independently and within a team environment.
- Ability to work under pressure on multiple projects and meet deadlines.
- Proficiency in Microsoft Office Suite applications, including Excel, PowerPoint, Word, and Copilot.
- Visa sponsorship is not available.
Nice To Haves
- Experience with Power BI and Visio.
- Experience leveraging artificial intelligence and emerging technologies to support risk analysis, vendor due diligence, monitoring, reporting, process efficiency, and other third-party risk management activities.
- Relevant professional certification, such as CTPRP, CTPRA, CRISC, CISA, CISM, or a comparable risk-management designation.
Responsibilities
- Execute, maintain, and enhance the Bank’s vendor performance and risk management strategies and framework.
- Develop, maintain, and enhance vendor risk management policies, procedures, standards, and processes to support the Bank’s strategic objectives.
- Manage intake and risk-tiering of new and existing vendor relationships through the vendor management system, ensuring required documentation, approvals, and risk assessments are completed according to established requirements.
- Challenge incomplete or insufficient due diligence, monitoring, risk acceptances, remediation plans, and supporting evidence; document conclusions and escalate material exposures, exceptions, and overdue actions.
- Coordinate with business owners, subject-matter experts, control functions, and vendors to gather and analyze vendor-related information, resolve issues, and implement risk mitigation and remediation plans.
- Administer and maintain the vendor management system, including vendor records, relationship ownership, risk classifications, contracts, due diligence documentation, issues, and supporting evidence.
- Analyze vendor risk factors based on risk classifications, including subcontractors with access to customer information, and ensure business owners monitor, assess, and mitigate relevant risks.
- Monitor vendor performance against contractual requirements and service level agreements, identifying, measuring, and reporting performance issues proactively.
- Prepare timely standard and ad hoc reports for senior management, governance committees, Internal Audit, external auditors, and regulatory inquiries.
- Contribute to vendor risk training, awareness, program documentation, and initiatives that strengthen business-owner accountability and regulatory readiness.
- Perform other duties and responsibilities as assigned in support of the Risk Management Division and the Bank’s strategic objectives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
