Vendor Risk and Controls Manager

Vendor Risk and Controls Manager

Requirements

• Bachelor’s degree or equivalent professional experience is required
• 3+ years of professional experience in vendor management, risk management, or internal audit
• 2+ years of experience working in a highly regulated financial services environment
• Proficiency in third-party risk management tools and technologies solutions
• Strong understanding of risk frameworks, regulations, and best practices
• Knowledge of emerging vendor risks such as AI ethics, ESG risks, and geopolitical risk
• Knowledge of internal controls, financial/banking regulations, operational risk and/or vendor risk assessments
• Excellent analytical, problem-solving, and decision-making skills
• Leadership and stakeholder management abilities
• Professional certification(s) applicable to risk management such as the CTPRP or CRVPM
• Ability to work independently with close attention to detail with a record of tracking and measuring results
• Demonstrated ability to handle ambiguity, while implementing new requirements
• Able to build positive relationships throughout the organization
• Excellent interpersonal, verbal and written communication skills

Responsibilities

• Execute a robust third-party risk management framework to assess, monitor, and mitigate vendor risks through risk assessment and oversight activities
• Consistently follow risk assessment methodologies to evaluate third-party vendors based on criticality, compliance, cybersecurity, operational resilience, and financial stability
• Drive completion of risk assessments and identify obstacles to contracting or continued relationships with third parties
• Ensure risk assessment reviews are thorough and confirm completion of due diligence prior to agreement signature
• Ensure that all activities and efforts are consistent with Schwab policies and guidelines and in alignment with regulatory guidance
• Ensure third-party risk management practices comply with industry regulations, internal policies, and best practices
• Stay updated on evolving regulatory landscapes affecting third-party risk and recommend necessary program adjustments
• Establish risk mitigation strategies for high-risk vendors
• Conduct regular risk reporting and escalate critical vendor risks to leadership
• Leverage third-party risk management tools and technology to streamline all aspects of risk reporting
• Drive automation and efficiency improvements in team processes
• Responsible for adhering to third-party risk metrics supporting completeness, accuracy and timeliness of third-party risk activities
• Assists with acquiring data and providing information during Internal Audit Reviews and Regulatory Examinations

Preferred Qualifications

No preferred qualifications provided.