Vendor Risk Analyst I: Third-Party Due Diligence

InComm Payments; Town of Florida (NY); On-site; USD 75,000 - 110,000; Full time

Job summary

InComm Payments is seeking a Vendor Risk Analyst I to help assess and manage third-party risk across our supplier portfolio. You will partner with owner teams to document and monitor vendor risk by adhering to corporate policies and regulatory requirements.

The role supports data privacy, information security, and continuity programs, collaborating with SMEs to implement risk controls and drive timely due diligence across geographies and functions.

Qualifications

• 3+ years of experience in financial services; 1–2 years specifically in risk management or vendor risk management.
• Experience in risk management, financial services, or related fields.
• Strong interpersonal, analytical, and problem-solving skills.

Responsibilities

• Collaborate with vendor relationship owners to maintain up-to-date records in the VRM toolset.
• Conduct pre-contract due diligence and post-contract monitoring tailored to each third party’s risk profile, geography, and business function.
• Ensure timely completion and accurate updates of third‑party risk assessments; track and follow up on outstanding items.
• Monitor compliance with third‑party management policies by reviewing reports and confirming required due diligence and monitoring activities are completed.
• Facilitate and support SMEs in areas such as Data Privacy, Information Security, Business Continuity, and Compliance to execute due diligence processes.
• Implement and oversee vendor risk monitoring activities, utilizing established metrics and tools as required.
• Respond promptly to vendor risk management inquiries via email, phone, and Microsoft Teams.

Skills

Interpersonal skills

Analytical skills

Problem-solving

Communication skills

Tools

Office 365

Job description

InComm Payments is seeking a Vendor Risk Analyst I to help assess and manage third-party risk across our supplier portfolio. You will partner with owner teams to document and monitor vendor risk by adhering to corporate policies and regulatory requirements.

The role supports data privacy, information security, and continuity programs, collaborating with SMEs to implement risk controls and drive timely due diligence across geographies and functions.