Head of Third-Party Risk Management

BCU; Vernon Hills (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

BCU seeks a seasoned leader to oversee and enhance its Third-Party Risk Management (TPRM) program in Vernon Hills, ensuring regulatory readiness and governance. You will own onboarding, due diligence, ongoing monitoring, contract review, and offboarding for third parties, while driving continuous program improvements.

You will collaborate with Finance, IT, Legal, and Procurement to assess controls, review SOC reports, and report metrics to executives.

Qualifications

• Bachelor’s degree required in Business, Finance, Risk Management, Information Systems, Cybersecurity, Accounting, or related field.
• 5 years of experience in Third-Party Risk Management, Vendor Management, Enterprise Risk Management, Information Security, or related discipline.
• Strong understanding of third-party risk lifecycle management (onboarding, due diligence, risk assessments, monitoring, issue management, offboarding).
• Experience evaluating vendor documentation including SOC 1 and SOC 2 reports, cybersecurity assessments, business continuity plans, financial statements, and compliance certifications.
• Working knowledge of regulatory expectations governing financial institutions and third-party relationships.
• Experience using Governance, Risk, and Compliance (GRC) platforms and vendor management systems.
• Strong analytical, organizational, project management, and communication skills.
• Ability to influence stakeholders and communicate risk to technical and non-technical audiences.

Responsibilities

• Manage BCU’s Third-Party Risk Management Program, including policies, standards, procedures, and governance frameworks.
• Maintain and enhance risk-based methodologies for vendor segmentation, inherent risk assessments, due diligence, monitoring, and issue management.
• Prepare and deliver risk reporting, metrics, and dashboards to executives and audit stakeholders.
• Support regulatory examinations, internal audits, and external reviews related to third-party risk management.
• Evaluate vendor controls and supporting documentation with cross-functional teams (Finance, IT, Legal, Procurement).
• Identify control gaps, document findings, and partner with business owners to implement mitigations.
• Oversee ongoing monitoring activities for critical and high-risk third parties.
• Maintain accurate inventories, risk ratings, and assessment records.

Skills

Vendor risk lifecycle

GRC platforms

Regulatory communication

Stakeholder influence

Risk reporting

Education

Bachelor’s degree in Business, Finance, Risk Management, Information Systems, Cybersecurity, Accounting, or related field

Tools

GRC platforms

Vendor management systems

SOC reports (SOC 1, SOC 2)

Job description

BCU seeks a seasoned leader to oversee and enhance its Third-Party Risk Management (TPRM) program in Vernon Hills, ensuring regulatory readiness and governance. You will own onboarding, due diligence, ongoing monitoring, contract review, and offboarding for third parties, while driving continuous program improvements.

You will collaborate with Finance, IT, Legal, and Procurement to assess controls, review SOC reports, and report metrics to executives.