Director of Third-Party Risk & Contract Governance

Tompkins Bank & Trust; Wyomissing (Berks County); On-site; USD 165,000 - 220,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k) Match

Profit Sharing

Paid Time Off

11 Holidays

Tuition Reimbursement

Free Parking

Employee Referrals

Job summary

Tompkins Bank & Trust is seeking a Director of Third-Party Risk Management to lead the enterprise TPRM program, oversee the end-to-end third party lifecycle, ensure regulatory alignment, and partner across business units to mitigate risk while balancing business objectives.

The role focuses on governance, reporting, and continuous improvement, with a strong emphasis on training and cross-functional collaboration to strengthen the risk framework.

Qualifications

• Bachelor’s degree in a relevant field.
• Minimum of eight (8) years of experience with third party risk management methodologies and regulatory guidance.
• Cybersecurity and/or information security experience preferred.
• Paralegal experience or contract negotiation experience required.
• Ability to assess third party financial statements and evaluate risks associated with vendor relationships.
• Ability to think abstractly and understand risks presented within third party relationships.
• Visual Basic and/or SQL database programming skills preferred.
• Demonstrated ability to build partnerships and consult effectively across business lines and functional groups.
• Knowledge of business operations, support functions, and organizational risk environments.
• Excellent interpersonal, verbal, and written communication skills with the ability to interact effectively at all organizational levels.
• Ability to drive process improvements and organizational change while managing milestones and deadlines.
• Current knowledge of third-party risk requirements, regulatory expectations, industry trends, and oversight practices.
• Project management experience.
• Advanced proficiency in Microsoft Office applications.

Responsibilities

• Direct, oversee, and coordinate the Company’s third-party risk management program.
• Lead the Third-Party Risk Management Committee and support enterprise-wide governance activities.
• Create policies, procedures, and program practices which align with evolving regulatory guidance and industry expectations.
• Oversee onboarding, due diligence, risk assessment, ongoing monitoring, issue management, and offboarding activities for third parties.
• Manage cross-functional risk review workflows across applicable disciplines and stakeholders.
• Manage annual risk assessments and ongoing due diligence requirements.
• Partner with relationship managers, business units, Procurement, Accounts Payable, and other stakeholders to support effective third-party oversight.
• Deliver communication, awareness, and training programs related to third party and contract management requirements.
• Manage information sharing and coordination among risk owners and business partners
• Prepare and present risk reports, assessments, trends, and program updates to committees, Corporate Risk, and the Board.
• Monitor service level reviews and address identified issues with third parties.
• Identify and implement opportunities to improve program effectiveness, efficiency, and risk management practices.

Skills

TPRM

Regulatory compliance

Contract negotiation

Paralegal experience

Financial statement analysis

SQL

Communication

Project management

Education

Bachelor’s degree in a relevant field

Tools

Visual Basic

SQL database programming

Job description

Tompkins Bank & Trust is seeking a Director of Third-Party Risk Management to lead the enterprise TPRM program, oversee the end-to-end third party lifecycle, ensure regulatory alignment, and partner across business units to mitigate risk while balancing business objectives.

The role focuses on governance, reporting, and continuous improvement, with a strong emphasis on training and cross-functional collaboration to strengthen the risk framework.