Senior Associate, Third-Party Risk & Controls

Fifth Third; Cincinnati (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

Fifth Third Bank – Cincinnati, OH – seeks a Business Controls Senior Associate focused on Third Party risk management. You will assess operational, information security, and regulatory risks, conduct onsite third‑party assessments, and review SOC/ISO reports to ensure compliance with bank requirements.

Travel domestically and internationally as needed; collaborate with Legal, Compliance, and Audit partners; contribute to risk mitigation and governance across multiple stakeholders.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 5+ years in financial services risk, controls, or compliance.
• Experience with third-party due diligence and risk assessments.
• Knowledge of IT infrastructure, cybersecurity and data privacy.

Responsibilities

• Assist Business Controls leadership with the development and implementation of controls, policies, procedures, and risk mitigation strategies.
• Provide expertise related to identification, assessment, monitoring, testing, and reporting of operational, compliance, information security, and third-party risks.
• Conduct third-party due diligence activities, including onsite assessments, site visits, assurance reviews, and risk assessments.
• Travel domestically and internationally to perform onsite third-party assessments and evaluate compliance with Bank requirements.
• Review assurance reports (SOC 1, SOC 2, ISO 27001 etc.) and other compliance documentation.
• Perform third-party risk assessments to evaluate third-party compliance with internal policies, contracts, regulatory requirements, and industry standards.
• Review contracts and security requirements to assess third-party obligations, risks, and control expectations.
• Evaluate information security controls, data privacy controls, restricted environments, and secure workflow processes.
• Review vulnerability management programs, vulnerability assessments, penetration testing results, and remediation activities.
• Support ongoing monitoring activities, audits, and lifecycle management processes.

Skills

Analytical skills

Communication skills

Travel readiness

Risk management

Education

Bachelor's degree or equivalent experience

Master's degree preferred

CISA/CRISC certifications preferred

Tools

Coupa

Archer

Power BI

Job description

Fifth Third Bank – Cincinnati, OH – seeks a Business Controls Senior Associate focused on Third Party risk management. You will assess operational, information security, and regulatory risks, conduct onsite third‑party assessments, and review SOC/ISO reports to ensure compliance with bank requirements.

Travel domestically and internationally as needed; collaborate with Legal, Compliance, and Audit partners; contribute to risk mitigation and governance across multiple stakeholders.