Vendor Risk & Compliance Analyst (Hybrid)

Citizens; Johnston (RI); Hybrid; USD 85,000 - 125,000; Full time

Job summary

Citizens is seeking a Third Party Risk Analyst to manage vendor issues and conduct Third Party Assessments. You will collaborate with business leaders and vendors, offering robust insights into risk and the effectiveness of test controls to meet Citizens policies.

You’ll identify issues and help craft action plans to mitigate risk and drive bank-wide best practices. You will lead risk assessments, manage evidence, and communicate security risk to diverse audiences, supporting regulatory

Qualifications

• Experience in financial services, risk, audit, compliance, cyber or third-party risk.
• Ability to navigate program requirements independently.
• Proficient use of Microsoft Word and Microsoft Excel.
• Experience gathering and analyzing evidence via artifacts, interviews, and records.

Responsibilities

• Evaluate third party vendors' control infrastructure and evidence.
• Lead risk assessments and develop risk metrics and visualizations.
• Collaborate with business leaders to define risk levels and action plans.
• Support regulatory exam preparation and remediation activities.
• Produce vendor assessment reports communicating risks to varied audiences.
• Translate security risk into business-friendly communication.

Skills

Stong verbal and written communication

Risk analysis

Governance, Risk and Compliance

Vendor management

Auditing

Regulatory frameworks

Microsoft Word

Microsoft Excel

Evidence gathering

Communication with leadership

Education

Bachelor’s Degree (preferred)

Industry certifications (CISA, CRCM, CRISC...)

Job description

Citizens is seeking a Third Party Risk Analyst to manage vendor issues and conduct Third Party Assessments. You will collaborate with business leaders and vendors, offering robust insights into risk and the effectiveness of test controls to meet Citizens policies.

You’ll identify issues and help craft action plans to mitigate risk and drive bank-wide best practices. You will lead risk assessments, manage evidence, and communicate security risk to diverse audiences, supporting regulatory