Standards & Governance: work cross-functionally with IT, Legal, and Compliance teams to establish and maintain third-party risk standards and governance practices.
Due Diligence & Monitoring: Conduct comprehensive vendor due diligence and ongoing monitoring activities, including evaluating consumer-impact risk, complaint analysis, and confirming privacy and data protection standards.
Documentation & Reporting: Manage third-party risk documentation and reporting, including maintaining the vendor and data processor inventory, ensuring timely onboarding and offboarding due diligence, and executing periodic compliance reviews.
Risk Assessment: Execute day-to-day risk assessments to determine vendor criticality and identify inherent risks in categories such as PII handling, BSA/AML, and credit decisioning.
Collaboration: Work cross-functionally with Legal to ensure effective contracts are in place and with Information Security to validate the technical safeguards of our third-party partners.
Issue Escalation: Identify, track, and escalate risk events or performance failures to senior leadership and bank partners through established issue-tracking systems.
What We Look For:
Experience: 7+ years of professional experience in vendor risk management, procurement, or third-party compliance, preferably within the fintech or regulated financial services industry.
Regulatory Knowledge: Understanding of third-party risk management lifecycle and regulatory guidance (e.g., PCI-DSS, SOC 2, GLBA, and BSA/AML).
Execution: Proven track record of managing a high volume of vendor assessments and maintaining a state of "audit-readiness" for bank partners and regulators.
Education: Bachelor’s degree in Business, Finance, Law, or equivalent practical experience.
Demonstrated experience working with Claude or equivalent large language model tools is required; candidates must be comfortable leveraging AI to enhance productivity, research, and communication.