Overview
Skills
Job Details
The Enterprise Risk Management ( ERM ) function is responsible for ensuring the consistent application of the risk management framework to help achieve its strategic objectives and operational efficiency while operating within the firm s risk appetite. ERM s objectives:
- Identify and monitor risk from the firm s verticals to understand global, horizontal risk trends and issues
- Assess and measure risks, control gaps or enhancements for risk relevant programs
- Aggregate risk information for monitoring and reporting; inform risk-based decision making
With a focus on creating a proactive risk management culture, embedding risk awareness into decision making processes across the firm, as part of our global organization, you will have the opportunity to contribute to an integrated approach to risk management, helping to shape our firm s approach to risk - making a meaningful impact on our ability to navigate an increasingly complex risk landscape.
POSITION SUMMARY
We are seeking to hire highly motivated and experienced a Risk Officer to work within the global Third-Party Risk Management ( TPRM ) team in our New York / Boston office. Reporting to the Global Head of TPRM, the successful candidate will operate within the team executing against the framework, providing risk oversight of the firm s third-party relationships, ensuring compliance with regulatory standards, and will drive a number of risk strategic deliverables to evolve the firm s program. . The individual will work closely with the Vendor Management, Compliance, Information Security, Privacy, Technology, Resiliency, Legal, among other key stakeholders across the firm.
RESPONSIBILITIES
- Design, build, and continuously iterate the TPRM framework and program to ensure it evolves with the company's needs and industry best practices
- Identify, assess, and support risk mitigation strategies associated with third-party relationships, ensuring compliance with regulatory standards, and supporting business objectives through effective risk management practices
- Ensure appropriate risk mitigation strategies are implemented, including conducting due diligence, risk assessment, and on-going monitoring of third parties
- Support the day-to-day operations of the TPRM function while driving strategic initiatives to enhance the program's effectiveness
- Collaborate and partner across the firm with various stakeholders across the vendor lifecycle including but not limited to sourcing, procurement, vendor management, compliance, information security, and legal
- Interface with business and key stakeholders to assess and monitor the firm s vendor inventory
- Develop and maintain risk metrics and dashboards to provide clear, actionable insights into third-party risk exposure
- Drive automation of TPRM processes and reporting to enhance efficiency and accuracy
- Develop and maintain procedural documentation to assist in standardizing the global vendor processes
- Conduct quality review of responses obtained on various onboarding and risk diligence forms
- Develop and conduct training sessions and awareness programs for internal stakeholders on third-party risk management practices and protocols
Skills:
- 4-7 years of experience in TPRM, vendor management, supply chain, procurement, and/or a risk related function
- Work experience at a global company, engaging with individuals in different positions, across all levels
- Proficiency in developing and managing IRQ and DDQ within TPRM platforms and familiarity with risk management software and vendor management tools
- Demonstrated experience in leading and managing complex projects, with a track record of successfully implementing risk management frameworks and processes
- Bachelor s degree in Business, Economics, Finance, Business Analytics, Management, or significant experience and understanding of risk management or the supply chain processes
KEY COMPETENCIES
- A proactive approach with a strong bias for taking action and driving results
- High analytical acumen along with a solid business sense that guides ROI-based prioritization and decisions
- Strong understanding of Third-Party Risk Management processes, frameworks and best practices
- Exceptional oral and written communication skills
- Ability to effectively interface with people at all levels, globally
- Excellent PowerPoint & Excel skills; SQL or technical skills are a plus
- A curious nature with a passion for innovation and continuous improvement
- Proven ability to manage multiple demands and projects in a fast-paced work environment, including ability to prioritize time efficiently and handle heavy workloads while remaining attentive to detail
- Maturity, presence, sound judgment, and ability to form and express opinions effectively
- Strong relationship development skills, including over the phone with global teams and with individuals of whom work is being requested