Vendor Risk & Compliance Strategist

1st Summit; Johnstown, Northern (Cambria County, KY); Híbrido; USD 90 000 - 140 000; Tempo integral

Resumo da oferta

1st Summit in Johnstown, PA seeks a Vendor Risk Manager to evaluate vendor relationships, review SOC reports, and embed regulatory safeguards into contracts. The role requires coordinating offboarding, continuous monitoring, and disruption drills to ensure resilience.

The ideal candidate will analyze financials, assess third-party risk, and report to leadership while coordinating across Legal, Procurement, and IT teams.

Qualificações

• Excellent verbal and written communication skills.
• Strong organizational skills and ability to meet deadlines.
• Ability to work independently to achieve goals and objectives.
• Ability to evaluate key contract provisions and propose changes as necessary.
• Proficient with Microsoft Office Suite or related software.
• Strong ability to interpret and evaluate information security posture, SOC reports, and financial statements of corporate vendors.

Responsabilidades

• Inherent Risk Assessment: Work with Business Line Owners to evaluate each proposed vendor relationship and assign the appropriate inherent risk tier.
• Rigorous Document Analysis: Collect, review, and challenge third-party control documentation, including SOC 1 and SOC 2 Type II reports, audited financials, and business continuity plans.
• Contract Safeguards: Work with Legal and Procurement to include required regulatory provisions in vendor contracts, such as audit rights, SLAs, and data security requirements.
• Secure Offboarding: Coordinate offboarding for terminated relationships, verifying data destruction, system access removal, and final contract closeout.
• Periodic Reviews & Continuous Monitoring: Maintain review schedule, conduct formal risk assessments, review financial health of critical third parties.
• Fourth-Party Risks: Identify concentration risks where primary vendors rely on critical downstream subcontractors.
• Lead Enterprise Third-Party Disruption Drills: Orchestrate annual bank-wide BCP and tabletop exercises.

Conhecimentos

Communication

Organization

Independence

Contract provisions

MS Office

SOC reports

Formação académica

Bachelor’s degree preferred

5 years equivalent experience

Vendor management platform experience

Ferramentas

Microsoft Office Suite

Descrição da oferta de emprego

1st Summit in Johnstown, PA seeks a Vendor Risk Manager to evaluate vendor relationships, review SOC reports, and embed regulatory safeguards into contracts. The role requires coordinating offboarding, continuous monitoring, and disruption drills to ensure resilience.

The ideal candidate will analyze financials, assess third-party risk, and report to leadership while coordinating across Legal, Procurement, and IT teams.