Third-Party Risk Governance Specialist

ACCA Careers; Tempe (AZ); On-site; USD 115,000 - 195,000; Full time

Benefits offered by this job

401(k) retirement benefits

Paid time off

Parental and caregiver leave

Job summary

Northern Trust is a global financial services firm seeking a Senior Third-Party Risk professional in the United States to oversee risk governance, risk and control assessments, and related reporting. You will partner with TPMO and business lines to ensure effective management of third-party risks and compliance with enterprise standards.

The role requires 7+ years in risk management, strong governance and communication skills, and the ability to coordinate across multiple stakeholders.

Qualifications

• Bachelor's degree in Business, Finance, Risk Management, or a related field.
• 7+ years of relevant experience in Corporate Risk Management, Enterprise Risk Management, Operational Risk, risk governance, internal controls, audit, compliance, or a related discipline.
• Practical experience applying Corporate Risk Management requirements within a first-line business function or in partnership with first-line teams.
• Experience coordinating risk governance processes such as risk and control assessments, issue management, operational risk events, control inventories, risk reporting, or audit activities.
• Strong understanding of enterprise risk frameworks, control environments, issue management, and governance requirements.
• Ability to translate risk management requirements into practical processes, documentation, defined responsibilities, and reporting.
• Experience preparing risk and governance information for leadership or governance forums.
• Proven ability to coordinate complex deliverables across multiple stakeholders without direct authority.
• Strong analytical and organizational skills, with the ability to connect information across risks, controls, issues, audit matters, and operational activities.
• Strong written and verbal communication skills, including the ability to present complex risk information clearly and concisely.
• Ability to exercise independent judgment while operating within an established functional framework and escalation structure.
• Strong understanding of Third-Party Risk management principles, including experience with policy development, control definition, and application of controls in the business.
• Strong knowledge of Third-Party Risk control environment.
• Strong knowledge of corporate risk policies and standards.
• Strong working knowledge of technologies relevant to responsibilities.
• Strong analytical skills including the use of relevant Tools such as Power BI.
• Strong collaboration and communication skills.
• Ability to drive to execution.
• Applies knowledge of key business drivers and the factors that maximize department performance.

Responsibilities

• Manage TPMO participation in applicable Corporate Risk Management processes, including risk and control assessments, issue management, operational risk events, control governance, and related risk activities.
• Coordinate the implementation of Corporate Risk Management requirements within TPM processes, documentation, responsibilities, and reporting routines.
• Maintain the TPMO calendar of required risk activities, assessments, governance reviews, reporting, and deliverables.
• Coordinate inputs from TPMO process owners and subject matter experts to support timely and accurate completion of risk management obligations.
• Maintain a consolidated view of TPMO risks, controls, issues, action plans, operational risk events, and related governance commitments.
• Incorporate Corporate Risk Management information into established TPMO reporting, including key themes, emerging risks, overdue activities, and matters requiring leadership attention.
• Facilitate TPMO risk governance routines, including preparation of materials, documentation of decisions, assignment of actions, and monitoring of commitments.
• Support the identification, documentation, escalation, and reporting of risks, issues, control gaps, and operational risk events in accordance with enterprise requirements.
• Maintain governance documentation and supporting evidence to demonstrate completion of TPMO’s Corporate Risk Management responsibilities.
• Identify dependencies, recurring themes, and reporting gaps across TPMO risk activities and elevate them through established governance channels.
• Provide guidance to TPMO partners regarding Corporate Risk Management processes, documentation expectations, required timelines, and reporting obligations.
• Support enhancements to TPMO governance procedures, reporting processes, roles, and supporting documentation.
• Assist TPMO leadership with governance materials and risk information for management discussions and applicable forums.
• Leads in the Third-Party Risk governance framework in the 1st Line of Defence, with oversight and reporting to enterprise leadership on related risk and control profile, issues / incidents and any relevant emerging risks.
• Works with Vendor Managers to ensure that Third Party Risk policies and guidelines are adhered to, and provide actionable support and guidance to the Business.
• Escalates any concerning trends to Senior Management. This may include (but not limited to) oversight and monitoring of emerging risks, weaknesses in controls and material change programs, deterioration in service / performance standards, and provide guidance on mitigating actions.
• Assists in review of internal and external Third-Party Risk related events and issues, to ensure that the root cause is adequately identified and remediation actions are fit for purpose.
• Works to ensure appropriate oversight / governance of intra-group arrangements is in place, and changes to business models are accurately reflected in applicable group documentation. This may include liaising (as needed) with Legal Entity Outsourcing Managers.
• Assists in the support of local regulatory and audit engagements pertaining to Third Party Risk; this includes supporting remediation activities.
• Supports Third Party Risk awareness and risk management culture in order to ensure that the material risks are both evident and effectively managed.
• Exercises judgment based on the analysis of multiple sources of information.
• Able to lead cross functional or complex projects with manageable risks and resource requirements.
• Acts as a subject matter expert for all team members, substitutes for manager when required.

Skills

Third-Party Risk

Risk governance

Operational risk

Issue management

Governance reporting

Power BI

Analytical skills

Communication skills

Education

Bachelor’s degree in Business/Finance

Tools

Power BI

Job description

Northern Trust is a global financial services firm seeking a Senior Third-Party Risk professional in the United States to oversee risk governance, risk and control assessments, and related reporting. You will partner with TPMO and business lines to ensure effective management of third-party risks and compliance with enterprise standards.

The role requires 7+ years in risk management, strong governance and communication skills, and the ability to coordinate across multiple stakeholders.