Third-Party Risk Review Lead

Location: Onsite listed in the job posting.

Job Description
The Review and Challenge Team Lead will oversee the independent review and validation of third-party risk assessments, due diligence processes, and risk mitigation strategies across First Horizon Bank's vendor portfolio. This role serves as a critical control function ensuring the effectiveness and adequacy of the bank's third-party risk management program through comprehensive challenge processes and quality assurance reviews.

Key Responsibilities

Leadership & Team Management

• Lead and develop a team of risk analysts specializing in third-party review and challenge activities.
• Establish clear performance expectations, provide coaching, and conduct regular performance evaluations.
• Foster a culture of independent thinking, critical analysis, and continuous improvement.
• Collaborate with hiring managers to recruit top talent for the review and challenge function.

Review & Challenge Operations

• Design and implement comprehensive review frameworks for third-party risk assessments conducted by business lines.
• Challenge the adequacy of vendor due diligence, risk ratings, and mitigation strategies.
• Conduct independent validation of high-risk vendor assessments and critical service provider evaluations.
• Review and challenge vendor risk appetite alignment and escalation processes.
• Validate the effectiveness of ongoing monitoring programs for third-party relationships.

Risk Assessment & Analysis

• Perform detailed analysis of vendor risk profiles across operational, cybersecurity, financial, compliance, and reputational risk categories.
• Evaluate the completeness and accuracy of vendor risk documentation and assessments.
• Challenge business justifications for accepting residual risks or risk appetite exceptions.
• Assess the adequacy of contractual risk mitigation terms and service level agreements.
• Review vendor financial stability assessments and concentration risk analyses.

Governance & Reporting

• Prepare comprehensive challenge reports with findings, recommendations, and risk opinions.
• Present challenge results to Third Party Risk Committee and senior leadership.
• Maintain detailed documentation of the results, activities and outcomes.
• Develop and track key performance indicators for the review and challenge function.
• Ensure compliance with regulatory guidance and internal policy requirements.

Process Improvement & Framework Development

• Continuously enhance review and challenge methodologies and tools.
• Develop risk-based sampling approaches for vendor portfolio reviews.
• Create standardized challenge procedures and quality assurance checklists.
• Implement automation opportunities to increase efficiency and consistency.
• Benchmark practices against industry standards and regulatory expectations.

Stakeholder Engagement

• Partner with business relationship managers, procurement, and legal teams.
• Collaborate with internal audit on third-party risk examination activities.
• Interface with regulators during examinations and provide challenge documentation.
• Work with technology teams to enhance third-party risk management systems.
• Engage with senior leadership on emerging third-party risks and trends.

Education and Certifications

• Bachelor's degree in business, finance, risk management or related field OR 7+ years of experience in banking risk management, with 5+ years in third-party risk management
• 2+ years of team leadership or supervisory experience
• Experience with regulatory examinations and regulatory guidance (OCC, FDIC, Fed)
• One of more of the following certifications preferred:
  • Certified Regulatory Vendor Program Manager (CRVPM)
  • Certified in Risk Management Assurance (CRMA)
  • Shared Assessments Certified Third Party Risk Professional (CTPRP)

Technical Skills

• Deep understanding of third-party risk management frameworks and best practices
• Strong analytical and critical thinking skills with attention to detail
• Proficiency in risk assessment methodologies and quantitative analysis
• Experience with GRC platforms (preferred: ServiceNow, Archer, or similar)
• Advanced Excel skills and familiarity with data analysis tools
• Knowledge of cybersecurity, operational resilience, and business continuity principles

Core Competencies

• Exceptional written and verbal communication skills
• Strong leadership and team development capabilities
• Ability to challenge and influence stakeholders at all organizational levels
• Independent judgment and decision-making skills
• Project management and organizational abilities
• Regulatory knowledge and examination readiness

About UsFirst Horizon is a leading regional financial services company, dedicated to helping our clients, communities and associates unlock their full potential with capital and counsel. With $81.7 billion in assets as of December 31, 2023, we serve clients through a team of approximately ~7,300 associates and ~418 banking centers throughout the southeastern United States. Headquartered in Memphis, TN, the banking subsidiary First Horizon Bank operates in 12 states across the southern U.S. First Horizon has been recognized as one of the nation's best employers by Fortune and Forbes magazines and a Top 10 Most Reputable U.S. Bank.

Benefit Highlights
Medical with wellness incentives, dental, and vision
HSA with company match
Maternity and parental leave
Tuition reimbursement
Mentor program
401(k) with 6% match
More -- FirstHorizon.com/First-Horizon-National-Corporation/Careers/Our-Benefits

Corporate Diversity Commitment:
We remain committed to creating a more equitable society, and that starts with our associates, our clients, and the communities we serve. We do this by elevating equity, providing capital and counsel, and committing to excellence in everything we do.

Follow Us Facebook
X formerly Twitter
LinkedIn
Instagram
YouTube