Strategic Third-Party Risk Lead

SmartBank; Brentwood (CA); On-site; USD 110,000 - 180,000; Full time

Job summary

SmartBank is seeking a seasoned Third-Party Risk Management professional to lead the TPRM program across the full vendor lifecycle. You will collaborate with Information Security, Compliance, Legal, Procurement, and Finance to ensure regulated, resilient vendor oversight.

The ideal candidate has 5+ years in vendor risk management with deep understanding of banking regulations and contract risk. The role requires strong governance, executive reporting, and a proactive risk mindset.

Qualifications

• 5+ years in vendor management or third-party risk management, information security, compliance, audit, or banking operations.
• Bachelor's degree preferred in business, finance, risk management, info systems or related.
• Experience with FFIEC, GLBA, OCC, FDIC, Fed guidance, and regulatory exams.

Responsibilities

• Manage the full third-party lifecycle, including planning, risk assessment, due diligence, contract review coordination, monitoring, escalation, offboarding, and termination.
• Perform risk-based due diligence covering SOC reports, financial condition, cybersecurity, privacy, business continuity, insurance, subcontractors, compliance documentation, and unresolved control issues.
• Maintain the third-party inventory, risk tiering, criticality designations, ownership assignments, service descriptions, data access indicators, fourth-party considerations, and risk classifications.
• Coordinate contract and service agreement reviews to identify operational, compliance, security, privacy, business continuity, audit rights, service level, termination, subcontracting, and transition risks.
• Track remediation, document risk acceptances or exceptions, elevate overdue or high-risk issues, validate corrective actions, and drive timely resolution.
• Facilitate risk-based annual and periodic vendor reviews based on policy, regulatory expectations, risk ratings, criticality, performance, control changes, and material relationship changes.
• Monitor concentration risk, fourth-party and subcontractor dependencies, geographic or service-provider exposure, and emerging risks affecting operations, customers, compliance, or resilience.
• Prepare management and board reporting on vendor risk metrics, critical and high-risk providers, due diligence status, overdue reviews, open issues, risk acceptances, emerging risks, concentration risk, exceptions, and program effectiveness.
• Partner with Information Security, Compliance, Legal, Procurement, Finance, Business Continuity, Operational Risk, Internal Audit, and other Business Units to support oversight and reinforce business-owner accountability.
• Maintain accurate, accessible documentation supporting due diligence, risk assessments, monitoring, issue management, risk acceptance, reporting, audits, exams, and regulatory reviews.
• Monitor regulatory guidance and industry practices related to third-party risk management.
• Coordinate annual SOX-related vendor reviews, including SOC report and vendor control assessments impacting financial reporting and key business processes.

Skills

Vendor management

Risk management

Regulatory compliance

Contract review

Executive reporting

Communication skills

Analytical skills

Teamwork

Relationship management

Project management

Integrity

Attention to detail

Education

Bachelor's degree in Business Admin or related

Job description

SmartBank is seeking a seasoned Third-Party Risk Management professional to lead the TPRM program across the full vendor lifecycle. You will collaborate with Information Security, Compliance, Legal, Procurement, and Finance to ensure regulated, resilient vendor oversight.

The ideal candidate has 5+ years in vendor risk management with deep understanding of banking regulations and contract risk. The role requires strong governance, executive reporting, and a proactive risk mindset.