AVP Third Party Risk Monitoring & Due Diligence

Madison-Davis; New York (NY); Hybrid; USD 103,000 - 135,000; Full time

Job summary

Madison-Davis, LLC seeks an AVP for Third Party Risk Monitoring & Due Diligence in New York. The role leads end-to-end monitoring of third and fourth party risks across cybersecurity and enterprise risk domains, with collaboration across Legal, Compliance, and CISO teams in a regulated financial services environment.

This hybrid NY position reports to the Enterprise Controls Department, offers bonus potential, and requires 5+ years in TPRM, IT audit or risk assessment, translating complex risks

Qualifications

• 5+ years in TPRM, IT audit, or risk assessment in financial services.
• Ability to translate complex risk into business terms for senior stakeholders.
• Experience coordinating with Legal, Compliance, CISO and business units.
• Audit-ready documentation and governance process knowledge.

Responsibilities

• Own end-to-end ongoing monitoring of third and fourth party risk across cybersecurity and enterprise risk domains.
• Coordinate with Cyber Defense to review alerts and respond to high-risk cyber threats.
• Serve as primary point of contact for Third Party Managers, Legal, Compliance, and CISO to assess business impact.
• Document material incidents in Archer including score declines, severe incidents, sanctions hits, and breaches.
• Identify and analyze risk issues, communicate impacts in business terms, drive remediation to closure.
• Support monthly concentration and portfolio risk monitoring and license assignments.
• Lead due diligence reviews, reassessments and significant change evaluations under TPRM policies.
• Assess inherent risk and control effectiveness across Information Security, Technology, and HR domains.
• Identify due diligence gaps; coordinate insurance validation as needed.
• Review Archer KRI reports to identify threshold breaches; support audits and regulatory exams.
• Maintain audit-ready records including QA reviews of assessments.
• Contribute to IRQs, DDQs, monitoring playbooks, KRIs and data integrity across systems.

Skills

TPRM

IT Audit

Risk Assessment

Stakeholder Engagement

Regulatory Environment

Tools

BitSight

Supply Wisdom

Archer

Job description

Title: AVP Third Party Risk Monitoring & Due Diligence Office Status: Hybrid New York, NY Base Salary: $103k $135k + Bonus

ABOUT THE ROLE

This AVP-level opportunity sits within the Third Party Due Diligence team of a well-established global financial institution's first-line Enterprise Controls Department, offering end-to-end ownership of the continuous monitoring program for third and fourth party service providers across cybersecurity, financial, compliance, operational, geographic, and ESG risk domains. The role combines rigorous ongoing monitoring with due diligence assessment execution, stakeholder engagement, and audit-ready documentation making it an ideal fit for a detail-oriented third party risk management professional with 5+ years of TPRM, IT audit, or risk assessment experience who thrives in a regulated financial services environment and is comfortable translating complex technical risks into clear business language for senior stakeholders.

RESPONSIBILITIES

• Own end-to-end ongoing monitoring of third and fourth party risks across cybersecurity (BitSight) and enterprise risk domains (Supply Wisdom) including weekly alert reviews, trend and impact analysis, ransomware and vulnerability assessments, fourth-party incident reporting, and composite risk-rating evaluations across Macro-Economic, Financial, Geo-Political, Infrastructure, Business, Legal, Security & Compliance, Scalability, and ESG domains
• Coordinate with Cyber Defense to review NCFTA alerts and identify, assess, and respond to emerging high-risk cyber threats affecting third parties
• Serve as primary point of contact for Third Party Managers, Business Approvers, Legal, Compliance, CISO/Cyber Defense, DLP, and SMEs to assess the business impact of third and fourth party risk events
• Document material incidents in Archer including score declines, severe incidents, sanctions hits, and breaches
• Identify and analyze risk issues, communicate impacts in clear business terms, drive and track remediation to closure, and elevate Critical or High risk issues to TPDD and TPRM leadership as appropriate
• Support monthly concentration and portfolio risk monitoring including engagement volume, service locations, contingent workers, and sole-provider exposure
• Contribute to quarterly reporting and maintain accurate BitSight portfolios and Supply Wisdom license assignments
• Lead and perform due diligence reviews, reassessments, and significant change evaluations in accordance with TPRM policies and procedures
• Assess inherent risk and control effectiveness across Information Security, Technology, Business Continuity, Risk Management, Incident Management, Physical Security, Nth-Party Risk, and HR domains
• Identify and document due diligence gaps and risk exposures; recommend remediation, risk acceptance, or escalation actions in Archer; coordinate Certificate of Insurance validation as needed
• Review Archer KRI reports to identify threshold breaches and overdue activities; ensure risk acceptances are recorded and tracked; support internal and external audits, regulatory exams, and Federal Banking Agency ROE reviews through timely and accurate documentation
• Maintain complete audit-ready records including QA reviews of 10% of Moderate/Low and 100% of Critical/High assessments
• Contribute to enhancement of IRQs, DDQs, monitoring playbooks, KRIs, and reporting processes; identify and remediate data anomalies in Archer and support reconciliations across systems