Vendor Risk & Compliance Specialist

1st-Summit-Bank; Johnstown (Cambria County); Sur place; USD 65 000 - 110 000; Plein temps

Résumé du poste

1st-Summit-Bank is seeking a Vendor Risk Manager to oversee third-party relationships from assessment to offboarding in Johnstown, PA.

You will work with business lines to evaluate risk tiers, review SOC reports and financials, and ensure contracts meet regulatory requirements. This role collaborates with Legal, Procurement, and Internal Audit to maintain FDIC readiness and robust governance.

Qualifications

• High school diploma or equivalent required.
• Bachelor’s degree preferred; 5 years of equivalent experience acceptable.
• Experience with vendor management platforms preferred.
• Knowledge of FFIEC IT handbooks and GLBA data privacy preferred.
• Certifications such as CTPRP, CISA, CRISC are preferred.

Responsabilités

• Assess inherent risk of vendor relationships with business lines.
• Review third-party control documentation (SOC 1/2, audits, continuity).
• Draft and negotiate contract safeguards including SLAs and data security.
• Coordinate offboarding and data destruction with IT and legal.
• Support governance, FDIC readiness, and reporting to the board.
• Liaise with internal auditors and examiners as needed.

Connaissances

Excellent verbal and written comms

Organizational and time-management

Ability to work independently

Contract provisions evaluation

Microsoft Office proficiency

SOC reports and financials evaluation

Formation

Bachelor’s degree in business or related field preferred

Five years of equivalent experience in lieu of degree

Certifications: CTPRP, CISA, CRISC preferred

Outils

Vendor management platform

Description du poste

1st-Summit-Bank is seeking a Vendor Risk Manager to oversee third-party relationships from assessment to offboarding in Johnstown, PA.

You will work with business lines to evaluate risk tiers, review SOC reports and financials, and ensure contracts meet regulatory requirements. This role collaborates with Legal, Procurement, and Internal Audit to maintain FDIC readiness and robust governance.