Senior Third Party Risk Manager

Position Summary:

The Senior Third-Party Risk Manager is responsible for the strategic oversight, governance, and continuous enhancement of the Bank's Third-Party Risk Management (TPRM) Program. This role serves as the subject matter expert for third-party risk and provides enterprise-wide leadership to ensure third-party relationships are identified, assessed, monitored, and managed in accordance with the Bank's risk appetite, regulatory expectations, and strategic objectives. The Senior Manager partners with business leaders, Risk Management, Compliance, Information Security, Legal, Operations, and executive management to strengthen third-party risk governance, facilitate risk-informed decision-making, and drive continuous program maturity. This position is responsible for program oversight, reporting, regulatory and audit support, committee reporting, and strategic initiatives related to third-party risk management.

Essential Functions:

Program Governance & Strategy • Lead the Bank's Third-Party Risk Management Program, framework, and strategic roadmap for continuous maturity. • Maintain TPRM policies, standards, procedures, and methodologies aligned with the Bank's risk appetite and enterprise risk framework. • Monitor regulatory developments, industry trends, and emerging risks, and recommend program enhancements. Risk Oversight & Advisory • Provide independent oversight and effective challenge of business-completed risk assessments, and lead TPRM due diligence, risk ratings, control evaluations, and ongoing monitoring. • Oversee third-party risk across the vendor lifecycle, from onboarding and contracting through renewal and termination. • Advise relationship owners and business units on TPRM requirements and risk mitigation, and facilitate approval of critical and high-risk relationships. Reporting & Governance • Develop KRIs, metrics, and dashboards, and present third-party risk reporting to executive management, Risk Committee, and other governance forums. • Escalate material risks, control weaknesses, and risk acceptance decisions in accordance with established governance requirements. Regulatory, Audit & Examination Support • Serve as the primary subject matter expert for regulatory examinations, audits, and independent reviews, coordinating timely responses and documentation. • Track remediation of audit, examination, and program findings to ensure ongoing regulatory alignment. Cross-Functional Leadership • Lead enterprise initiatives for TPRM governance, process improvement, and regulatory readiness in partnership with Compliance, Information Security, Legal, Operations, ERM, Business Continuity, and business stakeholders. • Provide training and guidance to relationship owners and stakeholders to promote a strong risk culture. People Leadership • Lead, coach, and oversee one to two Third-Party Risk Analysts, setting priorities and performance expectations. • Review analyst work for quality, completeness, and adherence to TPRM standards. • Develop team capabilities through feedback, cross-training, and development, performance, and succession planning. Program Administration • Oversee the vendor inventory, risk classifications, key vendor performance and service levels, and TPRM documentation and records standards. • Perform additional duties and special projects as assigned.

Education and Experience:

Education • Bachelor's degree from an accredited four-year college or university in Business, Finance, Risk Management, Accounting, Information Systems, or a related field. • Professional certifications such as CTPRP (Certified Third-Party Risk Professional), CRCM (Certified Regulatory Compliance Manager), CISSP (Certified Information Systems Security Professional) or similar certifications are preferred. Experience • Seven (7) or more years of progressive experience in Third-Party Risk Management, Enterprise Risk Management, Compliance, Internal Audit, Information Security Risk, Operational Risk, or a related risk discipline within the financial services industry. • Demonstrated experience managing or leading Third-Party Risk Management programs within a regulated financial institution. • Experience supporting regulatory examinations, audits, and issue remediation efforts. • Experience presenting risk-related information to senior management and governance committees preferred. Knowledge, Skills, and Abilities • Strong knowledge of Third-Party Risk Management lifecycle processes and industry leading practices. • Strong understanding of FFIEC, FDIC, OCC, Federal Reserve, and other applicable third-party risk management guidance. • Knowledge of vendor due diligence reviews, contract risk reviews, ongoing monitoring practices, and concentration risk assessments. • Strong knowledge of SOC 1, SOC 2, independent assessments, and control evaluation methodologies. • Familiarity with Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) platforms. • Strong analytical, risk assessment, and problem-solving skills. • Excellent written, verbal, presentation, and executive communication skills. • Ability to influence stakeholders and drive results across multiple business units without direct authority. • Ability to effectively prioritize competing responsibilities in a dynamic environment. • Strong organizational skills and attention to detail. • Proficiency in Microsoft 365 applications including Outlook, Excel, Word, PowerPoint, SharePoint, Copilot and Teams. • Positive attitude, sound judgment, and commitment to continuous improvement.

Supervisory Responsibility:

This position has supervisory responsibilities.

Job Type:

This is a full-time, exempt position. Typical work hours are Monday through Friday, 8:00am to 5:00pm.

Travel:

No travel is expected for this position.