Senior Third-Party Risk & Vendor Security Analyst

Members 1st Partnership; Enola (PA); On-site; USD 63,000 - 77,000; Full time

Job summary

Members 1st Partnership is seeking a Senior Third Party Enterprise Risk Management Analyst to protect the organization from vendor-related risks throughout onboarding, monitoring, and offboarding. You will review SOC reports, security tests, and BC plans, document gaps, and guide remediation actions.

You will collaborate with Legal, Procurement, IT Security, Compliance, and business units to ensure consistent oversight and training on risk policies.

Qualifications

• Advanced analytical, problem-solving and critical thinking skills.
• Strong interpersonal and communication skills.
• Knowledge of Credit Union products, services, and processes.
• Strong research skills.
• Strong working knowledge of third‑party risk management theory, tools, and practices.

Responsibilities

• Conduct comprehensive risk assessments for more complex new and existing third-party vendors, including financial, operational, IT security, and compliance risks.
• Obtain and ensure vendor documentation such as SOC reports, penetration test results, business continuity plans, and security questionnaires are reviewed.
• Identify and document control gaps and recommend remediation actions.
• Support onboarding by evaluating vendor criticality and required due diligence levels.
• Monitor vendors on an ongoing basis with periodic reviews and risk scoring updates.
• Ensure third-party risk processes align with frameworks like NIST, SOC 2, GDPR, FFIEC, or other standards.
• Maintain documentation and audit trails for audits.
• Track and manage vendor remediation plans, exceptions, and risk mitigation activities.
• Prepare dashboards and reports for leadership, risk committees, and auditors.
• Escalate high-risk findings and collaborate with stakeholders to resolve issues.
• Partner with Legal, Procurement, IT Security, Compliance, and Business Units for consistent oversight.
• Provide guidance and training on third-party risk policies and best practices.
• Provide mentorship and hands-on training to associates to strengthen team capabilities.

Skills

Advanced analytics

Communication skills

Credit union knowledge

Risk research

Critical thinking

Education

General and business knowledge equivalent to a bachelor's degree

Job description

Members 1st Partnership is seeking a Senior Third Party Enterprise Risk Management Analyst to protect the organization from vendor-related risks throughout onboarding, monitoring, and offboarding. You will review SOC reports, security tests, and BC plans, document gaps, and guide remediation actions.

You will collaborate with Legal, Procurement, IT Security, Compliance, and business units to ensure consistent oversight and training on risk policies.