Director, Third-Party Risk & Contract Governance

Tompkins Bank & Trust; Village of Brewster (NY); On-site; USD 165,000 - 220,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k) Match

Profit Sharing

Paid Time Off

11 Holidays

Tuition Reimbursement

Free Parking

Employee Referrals

Job summary

Tompkins Bank & Trust seeks an experienced Director of Third-Party Risk Management to lead the company’s program, oversee the lifecycle of vendor relationships, and ensure regulatory alignment across departments. The role requires collaboration with multiple stakeholders to assess, monitor, and mitigate third-party risk while supporting business objectives.

The position emphasizes governance, policy development, annual risk assessments, and continuous program improvement, with in-office work at

Qualifications

• Bachelor’s degree in a relevant field.
• Eight+ years of experience with third party risk management methodologies and regulatory guidance.
• Cybersecurity and/or information security experience preferred.
• Paralegal experience or contract negotiation experience required.
• Ability to assess third party financial statements and evaluate risks.
• Ability to think abstractly and understand risks presented within third party relationships.
• Visual Basic and/or SQL database programming skills preferred.
• Demonstrated ability to build partnerships and consult effectively across business lines.
• Project management experience.
• Advanced proficiency in Microsoft Office applications.

Responsibilities

• Direct, oversee, and coordinate the Company’s third-party risk management program.
• Lead the Third-Party Risk Management Committee and support enterprise-wide governance activities.
• Create policies, procedures, and program practices which align with evolving regulatory guidance and industry expectations.
• Oversee onboarding, due diligence, risk assessment, ongoing monitoring, issue management, and offboarding activities for third parties.
• Manage cross-functional risk review workflows across applicable disciplines and stakeholders.
• Manage annual risk assessments and ongoing due diligence requirements.
• Partner with relationship managers, business units, Procurement, Accounts Payable, and other stakeholders to support effective third-party oversight.
• Deliver communication, awareness, and training programs related to third party and contract management requirements.
• Manage information sharing and coordination among risk owners and business partners
• Prepare and present risk reports, assessments, trends, and program updates to committees, Corporate Risk, and the Board.
• Monitor service level reviews and address identified issues with third parties.
• Identify and implement opportunities to improve program effectiveness, efficiency, and risk management practices.

Skills

Contract negotiation

InfoSec experience

Financial statement analysis

Project management

MS Office

Communication skills

Analytical thinking

TPRM knowledge

Process improvement

Cross-functional collaboration

Education

Bachelor’s degree

Tools

SQL

Visual Basic

Job description

Tompkins Bank & Trust seeks an experienced Director of Third-Party Risk Management to lead the company’s program, oversee the lifecycle of vendor relationships, and ensure regulatory alignment across departments. The role requires collaboration with multiple stakeholders to assess, monitor, and mitigate third-party risk while supporting business objectives.

The position emphasizes governance, policy development, annual risk assessments, and continuous program improvement, with in-office work at