Third-Party Risk Management Risk Analyst II

Job Description and Requirements

The Third-Party Risk Management (TPRM) Analyst II will be responsible for validating the inherent

risk of all vendor contract requests submitted through the Governance, Risk, and Compliance (GRC)

software. The TPRM Analyst II will assist with the on boarding and on-going vendor monitoring

assessments on a risk-based selection of vendors. This will include communicating with business

units and vendors to obtain the required due diligence documentation requested to meet set

deadlines. The TPRM Analyst II will serve as a backup for TPRM Analyst I as needed.

Essential Functions and Responsibilities:

• Validate the accuracy of all inherent risk ratings through the Credit
• Unions GRC Software.
• Initiate vendor due diligence on new vendors that are inherently
• risk rated Significant or Critical.
• Assist with on-going vendor due diligence processes for existing
• vendors on an annual basis.
• Collect vendor due diligence documentation (SOC Reports, Financial
• Information, Complaint Policy, etc.) to support risk reviews and
• residual risk ratings.
• Serves as a subject matter expert in identifying key risk associated
• with vendor service/product.
• Performs vendor assessments using critical thinking, analytical, and
• problem-solving skills.
• Collaborates with business units / vendor relationship managers using
• excellent communication and interpersonal skills.
• Uses strong attention to detail skills to ensure vendor risks are
• identified, measured, and mitigated aligned to the CU's risk appetite.
• Manages multiple tasks simultaneously.
• Trains applicable stakeholders on vendor risks, mitigation
• strategies, and TPRM processes.
• Cross trains in all aspects of the TPRM process and serves as a
• backup for other team members as needed.
• All other duties as assigned (Note: essential functions and responsibilities may change, or new ones may be assigned at any time with or without notice)

Requirements:

• High School Diploma or G.E.D.
• Minimum of 3 years TPRM experience, contracts experience, or vendor process experience.
• Must be able to work independently.
• Open to obtaining certifications.
• Able to work in a fast-paced environment with heavy contract volume.
• Experience with assessing vendor risk and identifying red flags.
• Excellent organizational, communication and interpersonal skills.
• Meticulous attention to detail.
• Proficient knowledge of Excel, Outlook, and Quantivate (Preferred)

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.