Vendor Risk Manager

Hyundai Capital America•Irvine, CA

70d•Onsite

About The Position

The Vendor Risk Manager is responsible for managing vendor termination process, reviewing initial due diligence, ongoing vendor performance monitoring, and performing annual vendor risk assessments. This role works proactively with various business units to evaluate vendor performance through collection of performance metrics, facilitate the vendor renewal process and vendor compliance.

Requirements

Minimum 5-7 years progressive related experience.
Bachelor's degree or equivalent work experience required.
Knowledge of consumer financial regulations and HCA's compliance requirements.
Knowledge of 3rd party risk management frameworks and risk assessment processes.
Knowledge of collections and repossession processes and regulatory requirements.
Ability to review and understand vendor financial health and performance.
Knowledge of SOC reports and ability to review and understand them.
Strong communication skills with ability to communicate effectively in written and verbal forms with all levels in the organization and external vendors.
Strong skills in Microsoft Office Suite and web-based software tools.
Analytical ability to identify vendor compliance and SLA issues from data sets, vendor documentation and sample testing.

Responsibilities

Vendor Governance (Vendor due diligence, vendor onboarding, compliance reviews)
Manage vendor risk rating during vendor onboarding process to ensure proper risk rating.
Request, collect and review new vendor due diligence documentation for completeness, submit for approval, create and communicate due diligence summary reports to relevant stakeholders for all vendors (A, B, and C risk).
Complete independent on-site compliance reviews to high-risk vendors to ensure vendor compliance with applicable laws, regulations and HA policy and procedures. Report compliance issues to HA Management and oversee vendor efforts to remediate identified issues.
Perform desktop vendor compliance and periodic vendor control reviews to identify, document and report compliance issues to HCA Management for remediation.
Facilitates the collection and review of Service Organization Controls (SOC) reports.
Manage Information Security periodic and quarterly compliance reviews by collecting documentation (compliance testing, Call QA, call logs, licenses, etc.) from vendors to assess vendor's compliance with consumer finance and collections regulations.
Vendor Risk: Manage monthly employee termination notices to remove terminated users; Monitor and manage vendor record cleanup
VMO Process & Procedure document Maintenance: Periodically review and update all VMO Process & Procedure documents stored in Navex
P-Card Administration and Compliance: Manage monthly reconciliation; Monitor account holder charge receipt compliance; Manage employee access and offboarding compliance
Validate contracts between Vendor Risk and Legal drive.
Proactively identify contract renewal/termination timeframes.
Manage notification of renewal to business in advance to determine course of action and/or conduct exit procedures based on the business decision.
Provide reporting metrics on department purchase order activity and vendor payables.
Conduct ad-hoc reporting and analysis as required.
Generate vendor risk audit reports.
Manage all task, due diligence and vendor reports in Vendor Risk.
Payment Changes - ensure proper validation (verbal and email) and update of vendor banking, address and other information in Oracle and Vendor Risk
Site Changes - ensure proper documentation has been received/reviewed by legal
Name Changes - request and validate documentation has been received/reviewed by legal
Vendor Terminations - work with impacted business units to ensure Vendor Terminations are managed and closed in accordance with the Vendor Termination checklist, IT systems shut off, Certificates of Destruction received, and Oracle profile deactivated timely.
User Terminations - Manage monthly employee termination notices to remove terminated users from Vendor Risk system.
Oracle iSupplier Support - manage vendor relationships and support eInvoicing vendors. Assist with troubleshooting portal access or functionality issues. Collaborate with the IT team to address system issues.