Remote Third-Party Risk Manager | TPRM & Programs

F5 Remote Jobs; San Francisco, New York, Portland (CA, NY, OR); Hybrid; USD 132,000 - 166,000; Full time

Job summary

Mercury is seeking a Third Party Risk Manager in a role spanning enterprise-wide TPRM activities. You will conduct risk assessments, help build risk reporting, and provide second-line oversight across the lifecycle, collaborating with Compliance, InfoSec, Privacy, and Procurement to align requirements with banking expectations.

The role focuses on enterprise-wide TPRM, with opportunities to influence across departments and drive process improvements.

Qualifications

• 4+ years of third party risk management experience, including 2+ years in regulated financial services.
• Knowledge of regulatory guidance on third party risk and TPRM lifecycle.
• Hands-on experience completing third party risk assessments across multiple risk domains.
• Experience reviewing and challenging first-line risk work with evidence-based pushback.
• Experience supporting audits or exams of a TPRM program.
• Experience building or maintaining TPRM reporting and metrics.
• Strong program and project management skills across cross-functional components.
• Proven ability to influence cross-functional partners without direct authority.
• Clear communicator who can explain a risk position under pushback.

Responsibilities

• Assess and risk rate: Complete third-party risk assessments and track issues through resolution.
• Second-line oversight: Review and challenge first-line due diligence and monitoring, with approvals and oversight.
• Reporting and data: Support maintenance of third party risk reporting and metrics.
• Tooling and automation: Help implement tooling and automation to improve processes.
• Program uplift: Contribute to uplift efforts across the TPRM program including policy updates and due diligence processes.

Skills

Third party risk management

Regulatory guidance knowledge

Risk assessments

Audit support

TPRM reporting

Program management

Influence stakeholders

Communication

Pushback on risk work

Education

CISA CGRC certification

Job description

Mercury is seeking a Third Party Risk Manager in a role spanning enterprise-wide TPRM activities. You will conduct risk assessments, help build risk reporting, and provide second-line oversight across the lifecycle, collaborating with Compliance, InfoSec, Privacy, and Procurement to align requirements with banking expectations.

The role focuses on enterprise-wide TPRM, with opportunities to influence across departments and drive process improvements.