Sr. Third-Party Vendor Risk Analyst

INSPYR Solutions - Deerfield Beach, FL

Full-time - Mid Level

Deerfield Beach, FL

Administrative and Support Services

About the position

The Sr. Third-Party Vendor Risk Analyst is responsible for conducting risk assessments of third-party vendors to identify potential information security risks. This role involves overseeing vendor performance monitoring, ensuring compliance with contractual obligations and regulatory requirements, and collaborating with various internal teams to manage vendor risks effectively.

Responsibilities

• Conduct risk assessments of third-party vendors to identify potential information security risks.
• Oversee the ongoing monitoring of vendor performance and compliance with contractual obligations.
• Support the TechFinance Business Unit in managing third-party risk assessment programs.
• Specialize in third-party risk evaluation with a focus on vendor assessments.
• Participate in conducting and receiving assessments.
• Collaborate with internal teams to identify, address, and communicate vendor risks.
• Develop strong relationships with department heads to ensure vendor risks are understood and managed effectively.
• Create vendor due diligence questionnaires for high-risk services.
• Review vendor responses and due diligence documentation.
• Document due diligence results, residual risks, and ongoing vendor management tasks.
• Address vendor operational issues, breaches, and reported risks, ensuring appropriate remediation plans are in place.
• Oversee and document contract and risk remediation activities for third-party relationships.
• Monitor and review vendor performance reports prepared by business users.
• Conduct annual vendor risk segmentation and establish risk ratings for new vendors.
• Provide input and periodically test updates to the firm's risk systems.

Requirements

• Experience working with financial institutions is a plus.
• Strong background in vendor assessments, including evaluating vendors for compliance, performance, and risk.
• Deep understanding of evaluation domains, ensuring consistency in assessments.
• Experience assessing vendors' security and privacy postures.
• Ability to support the management of vulnerability and risk remediation.
• Experience in policy development and maintenance.
• Proven ability to prioritize and manage multiple complex tasks and deliverables with integrity and accountability.

Benefits

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan