Risk Analyst
Role description
The Risk Analyst will be supporting and driving various activities relating to IT risk management, 3rd party vendor risk-based assessments monitoring and reporting. This person will be monitoring inventory of third-party relationships to develop teams to oversee and facilitate onboarding of 3rd-Parties that require expedition or additional sensitivity based on services provided. The ideal person for this role will have experience presenting to executives and upper management and excellent communication skills.
Job Duties:
- Ensure transparency of business results, finance and processes and track goals accomplishment, collect and process data and provides managers with all necessary company management data and information.
- Challenge stratification of third-party risk-based assessments and refreshed regularly to efficiently allocate resources to relationships posing the highest risk.
- Monitor inventory of third-party relationships including outsourcing partners, suppliers of goods and services (including third-party administrators), distribution partners, entity relations (associates, affiliates, joint ventures) and important fourth parties (sub-contractors).
- Ensure capture of the full lifecycle and range of third-party relationships, identify, monitor and track exceptions to policy.
- Ensure awareness in the Business Line of risk frameworks, policies and standards.
- Maintain two-way communications with SLoD (Second Line of Defense) and facilitate training for Business Lines to provide awareness of risk frameworks, policies, programs, processes, etc.
- Facilitate Business Line awareness of and adherence to risk frameworks, policies, and standards in addition to reporting and escalating exceptions and facilitate Business Line corrective actions.
- Continuously monitor all sources of risk existing within the Business Line and externally.
- Monitor Key Risk Indicators and report on negative/adverse trends in Business Line. Monitor risk profile to maintain tolerance within Risk Appetite.
- Engage and hold Business Line process owners accountable to identify and assess risks. Support Business Lines in risk identification (e.g. NPBA, change management, etc.) Ensure all issues (Self-Identified, IA, Credit Risk Review or Regulatory) pertaining to the Business Line are resolved within established timelines.
- Liaison with the Business Line for all exam related activities including regulatory, Internal Audit and Credit Risk Review.
Education & Requirements:
- Bachelor's Degree is required
- 3+ years' banking experience or relevant industry experience, preferably in areas such as Audit, Technology, Risk, Vendor Risk Analysis, Operations, and/or public accounting
- Must have deep knowledge in key domains of Third-Party Risk Management (TPRM), TPRM Metrics Design and Implementation and TPRM Policy and Procedures development
- Experience in Vendor Management, Risk Management, Internal Controls, Auditing, relevant line of business experience and/or legal or regulatory experience
- Proven success within Agile/Scrum environments, Project Management Office governance procedures within digital project settings
Plus:
- Industry certifications are preferred, such as CRISC, CGEIT, CISA