Third Party Risk Management

Hw3 Llc; New York (NY); On-site; USD 110,000 - 140,000; Full time

Job summary

Hw3 Llc, a leading financial services partner, is seeking an experienced Third Party Risk professional to oversee external service providers across risk areas.

You will manage ongoing risk monitoring, conduct due diligence, assess vendor exposure, and drive remediation with internal stakeholders. The role emphasizes governance improvements and regulator-aligned controls in a dynamic environment.

Qualifications

• 5+ years of experience in Third Party Risk Management or related areas.
• Strong understanding of due diligence, ongoing monitoring, and control evaluation methodologies.
• Familiarity with cybersecurity, information security, operational resilience and business continuity risk concepts.
• Experience with GRC platforms and vendor monitoring tools such as Archer, BitSight, Supply Wisdom or similar.

Responsibilities

• Manage ongoing risk monitoring activities across third-party vendors and external service providers.
• Assess vendor exposure across cybersecurity, operational, financial, regulatory, and business continuity risk areas.
• Investigate risk alerts, evaluate potential business impacts, and coordinate remediation with internal stakeholders.
• Conduct third-party due diligence assessments, periodic reviews, and risk evaluations to ensure policy alignment.
• Support risk reporting, governance initiatives, and improvements to vendor oversight processes, controls, and monitoring frameworks.

Skills

Third Party Risk Management

Vendor Risk

IT Risk

Risk Assessment

Stakeholder Management

Tools

Archer

BitSight

Supply Wisdom

Job description

We are partnering with a leading financial services organization seeking an experienced Third Party Risk professional to support the oversight, monitoring, and assessment of external service providers across a broad range of risk areas.

What You'll Do

• Manage ongoing risk monitoring activities across third-party vendors and external service providers, identifying emerging risks and potential control weaknesses.
• Assess vendor exposure across cybersecurity, operational, financial, regulatory, and business continuity risk areas.
• Investigate risk alerts, evaluate potential business impacts, and coordinate remediation efforts with internal stakeholders.
• Conduct third-party due diligence assessments, periodic reviews, and risk evaluations to ensure alignment with internal policies and regulatory expectations.
• Support risk reporting, governance initiatives, and improvements to vendor oversight processes, controls, and monitoring frameworks.

What You'll Need

• 5+ years of experience in Third Party Risk Management, Vendor Risk, IT Risk, IT Audit, or a related discipline, ideally within financial services.
• Strong understanding of third-party due diligence, ongoing monitoring, risk assessments, and control evaluation methodologies.
• Familiarity with cybersecurity, information security, operational resilience, and business continuity risk concepts.
• Experience working with GRC platforms and vendor monitoring tools such as Archer, BitSight, Supply Wisdom, or similar solutions.
• Strong analytical, communication, and stakeholder management skills, with the ability to assess risks, communicate findings, and drive remediation activities.