Senior Third-Party Risk Manager

Hw3 Llc; New York (NY); On-site; USD 110,000 - 140,000; Full time

Job summary

Hw3 Llc, a leading financial services partner, is seeking an experienced Third Party Risk professional to oversee external service providers across risk areas.

You will manage ongoing risk monitoring, conduct due diligence, assess vendor exposure, and drive remediation with internal stakeholders. The role emphasizes governance improvements and regulator-aligned controls in a dynamic environment.

Qualifications

• 5+ years of experience in Third Party Risk Management or related areas.
• Strong understanding of due diligence, ongoing monitoring, and control evaluation methodologies.
• Familiarity with cybersecurity, information security, operational resilience and business continuity risk concepts.
• Experience with GRC platforms and vendor monitoring tools such as Archer, BitSight, Supply Wisdom or similar.

Responsibilities

• Manage ongoing risk monitoring activities across third-party vendors and external service providers.
• Assess vendor exposure across cybersecurity, operational, financial, regulatory, and business continuity risk areas.
• Investigate risk alerts, evaluate potential business impacts, and coordinate remediation with internal stakeholders.
• Conduct third-party due diligence assessments, periodic reviews, and risk evaluations to ensure policy alignment.
• Support risk reporting, governance initiatives, and improvements to vendor oversight processes, controls, and monitoring frameworks.

Skills

Third Party Risk Management

Vendor Risk

IT Risk

Risk Assessment

Stakeholder Management

Tools

Archer

BitSight

Supply Wisdom

Job description

Hw3 Llc, a leading financial services partner, is seeking an experienced Third Party Risk professional to oversee external service providers across risk areas.

You will manage ongoing risk monitoring, conduct due diligence, assess vendor exposure, and drive remediation with internal stakeholders. The role emphasizes governance improvements and regulator-aligned controls in a dynamic environment.