Vendor Risk Management Resume Samples
4.7
(97 votes) for
Vendor Risk Management Resume Samples
The Guide To Resume Tailoring
Guide the recruiter to the conclusion that you are the best candidate for the vendor risk management job. It’s actually very simple. Tailor your resume by picking relevant responsibilities from the examples below and then add your accomplishments. This way, you can position yourself in the best way to get hired.
Craft your perfect resume by picking job responsibilities written by professional recruiters
Pick from the thousands of curated job responsibilities used by the leading companies
Tailor your resume & cover letter with wording that best fits for each job you apply
Resume Builder
Create a Resume in Minutes with Professional Resume Templates
CHOOSE THE BEST TEMPLATE
- Choose from 15 Leading Templates. No need to think about design details.
USE PRE-WRITTEN BULLET POINTS
- Select from thousands of pre-written bullet points.
SAVE YOUR DOCUMENTS IN PDF FILES
- Instantly download in PDF format or share a custom link.
MS
M Smitham
Marion
Smitham
3287 Alejandrin Passage
San Francisco
CA
+1 (555) 478 0969
3287 Alejandrin Passage
San Francisco
CA
Phone
p
+1 (555) 478 0969
Experience
Experience
Dallas, TX
Vendor Risk Management Analyst
Dallas, TX
Wunsch, Purdy and Kuhlman
Dallas, TX
Vendor Risk Management Analyst
- Assist in the reporting of vendor risk management activities
- Develop and maintain standard operating procedures (SOPs)
- Be an ambassador for the team to assist with the ongoing integration of the GRC with other business units
- Act as a subject matter expert to assist the business in identifying and mitigating risks on their vendor relationships
- Provide analysis and recommendations for identified security exceptions; participate in defining remediation efforts
- Ensure all vendor relationships are documented in the VRM system and all contracts related to vendors that provide outsourced services are uploaded in the system
- Perform 3rd Party Vendor Risk Assessments
Houston, TX
Vendor Risk Management Senior Specialist
Houston, TX
Schoen, Weimann and Kshlerin
Houston, TX
Vendor Risk Management Senior Specialist
- Identify, categorize and evaluate “Core Processes” and “Non-core Processes”, using a “Risk-Based Standard”, for potential or current service providers; delivering to the company leadership a risk-based ranking of business critical processes and/or services which are provided and/or delivered by an independent third party
- Create and institute policies and procedures to conduct onsite risk analysis for strategic and consumer facing vendors
- Lead and complete risk analysis for onsite assessments, with the assistance of the business, for VCI’s consumer facing vendors, ensuring consistent execution
- Ensure all vendors are classified and assessments completed in accordance with the VRM policy
- Ensure all vendor relationships are documented in the VRM system and all contracts related to vendors that provide outsourced services are uploaded in the system in accordance with the VRM policy
- Manage the functionality of the VRM system which is VCI’s central repository for vendor contracts and related documents and is the record of all vendor due diligence and issue management
- Work with the, Legal, Compliance, Information Risk Management, Purchasing, and Internal Audit to ensure consideration of third party risk within their own risk domain framework
present
Detroit, MI
VP-vendor Risk Management, Santa Ana
Detroit, MI
Wyman Inc
present
Detroit, MI
VP-vendor Risk Management, Santa Ana
present
- Strong focus and capabilities to lead and prioritize multiple responsibilities simultaneously
- Partners with SVP to develop, implements, oversees, and reports on Vendor Risk Management processes, tools, policies, standards, and procedures ensuring alignment with the Bank’s Enterprise Risk Framework program
- Serves as support for SVP in line of defense for all third party vendor risks; ensures new or emerging risks are consistent with the Board approved risk appetite; and escalates inconsistent risks timely
- Implements internal service level agreements (SLA’s) with third party business unit owners and ensures all vendor requests are addressed by the vendor risk department within the predetermined SLA’s
- Performs third party risk assessments, identifies issues and/or control gaps, and recommends remediation initiatives
- Conducts annual third party vendor management training, together with the Deputy CRO, for all third party business unit owners
- Prepares departmental reports for the Senior Executive team and/or the Board of Directors as requested
Education
Education
Bachelor’s Degree in Computer Science
Bachelor’s Degree in Computer Science
Ball State University
Bachelor’s Degree in Computer Science
Skills
Skills
- Attention to details and the ability to dive deep
- Excellent communication skills, both written and spoken
- Ability to analyze issues and resolve issues with creative solutions
- Proficiency in Microsoft Word, Excel, PowerPoint and SharePoint
- Strong Planning and Time Management
- Familiar with Contracts Risk Management
- Experience working in Financial Services
- Years of experience 10-12 years
8 Vendor Risk Management resume templates
Read our complete resume writing guides
1
SVP, Privacy & Vendor Risk Management Resume Examples & Samples
- Partner with colleagues across GRC, Business Technology Services, Procurement and LPL to help drive a culture of risk awareness and proactive risk identification and assessment within the business
- Develop positive working relationships within GRC and other business partners to maintain an open environment for collaboration, risk identification, and remediation
- Report key performance indicators and other department metrics with accountability to Chief Privacy Officer, management team, and company's executive leadership
- Facilitate effective vendor risk management governance for all VRM and offshoring initiatives which includes defining scope of work, assigning appropriate resources and prioritizing project work
- Actively manage Privacy and Incident Management programs
- Direct and motivate staff and ensure an environment that encourages associates to develop their professional capabilities and supports their career objectives
- Bachelors Degree in Business Administration or related field
- 5+ years of career focus on Risk Management, Privacy, or Financial Services Compliance
- Series 7 or 24 preferred
- Highly analytical and metrics-oriented
- Ability to forge solid relationships with senior management team
- Strategy formulation and implementation; tracking and measuring progress against agreed objectives/ deliverables
- Working with and directing overseas resources
- Budgeting & Forecasting
- Effective Change Management
2
Lead Vendor Risk Management Resume Examples & Samples
- Manage an operational team of ~18 individuals (primarily based in Poland) for both vendor onboarding due diligence and ongoing monitoring, referenced as the Vendor Risk Management (VRM) team
- Support business stakeholders in the completion of the inherent risk assessment questionnaires
- Responsible for the global end to end vendor screening process, including coordination of and collaboration with other risk groups, e.g. BCM, Information Security to ensure timely execution of all the relevant assessments
- Oversee operational execution of vendor due diligence assigned to the VRM team including establishing control mechanisms to track timeliness and accuracy and consistency
- Responsible to ensure effective execution of required monitoring, including prioritization and alignment of continued vendor reviews
- Coordinate/monitor pre and post-contract issue management and resolution between risk groups and vendors
- Support business and SVM’s sourcing teams in case of required termination of a third party contract or relationship to ensure alignment across different stakeholders
- Establish and maintain procedures and operational governance forums with the relevant stakeholders to ensure appropriate oversight over the VRM activities globally
- Interact closely with regional regulatory coordinators within SRC to ensure global program alignment and regulatory requirements are met
- Accountable for continuous improvement initiatives and process optimization to ensure compliance to applicable rules and regulations and mitigate key commercial, contractual & reputational risk as part of the vendor risk screening processes
3
Vendor Risk Management Staff Resume Examples & Samples
- Performing third party risks assessment on behalf of our clients over the outsourced processes
- Experience in handling key activities of audit life cycle: scoping, planning, fieldwork execution, reporting, QA and issues tracking
- Assessing findings and articulating the risks in the context of a client's risk management framework and recommend areas of improvement
- Reporting and communicating risks to all stakeholders including senior management
- Should be updated on latest information security risks and vulnerabilities
- Risk assessment: exposure and hands on experience with risk assessment methodologies, creating risk registers, risk treatment and mitigation activities
4
Vendor Risk Management Summer Intern Resume Examples & Samples
- Assist in the day-to-day support for the Firm’s VRM Office and it’s vendors, including the vendor lifecycle from business engagement, vendor identification, vendor due diligence risk assessment, periodic monitoring and termination
- Identify general opportunities for process improvements to deliver increasing operational efficiency in the VRM and SSEM process
- Support VRM and SSEM program initiatives
- Liaison with the HR business partners, legal, compliance, IT, Sourcing, Finance and others as needed to ensure VRM compliance with the Firm’s guidelines and policy
- Perform analysis and produce reports with vendor metrics as well as program throughput
- Track and assess the relative accuracy and completeness of the business & vendor submissions – return to submitter as needed and assist in completing correctly
- Currently enrolled in a four year undergraduate program with at least two years completed
- Accounting, Finance or Supply Chain Management majors preferred
- Working knowledge of Contracts and Sourcing activities
- Strong interpersonal skills, attention to detail and written & verbal presentation skills
- Excellent organizational skills to prioritize projects and multi-task
- Experience with Excel & Excel reporting (Pivot tables, V-Lookups)
- Ability to work independently as well as part of a team under pressure to meet deadlines
5
Cyber Security Vendor Risk Management Specialist VP Resume Examples & Samples
- Extensive knowledge and experience in IT Security and Information Security (both technical and organizational controls)
- Understanding of banking industry and services to be able to evaluate impact of security risks is beneficial
- Ability to communicate and operate in a complex global organization and promote the adherence to corporate policy goals while building working relationships with senior management and vendor staff
- Ability to explain, document and present information security risks in a clear, concise and understandable manner, ability to present a big picture and connect the dots
- Robust and strong analytical skills to thoroughly analyze vendor services in appropriate timeframe without missing key issues
- Detailed oriented, collaborative and team oriented, ability to manage conflicts
6
Vendor Risk Management Senior Resume Examples & Samples
- Exposure to Information Security Management Systems (ISMS) framework
- Testing of controls, identification of deficiencies
- Risk assessment: exposure and hands on experience on risk assessment methodologies, create risk registers, risk treatment and mitigation activities
- Managing client relationships, handling escalations and reviewing work of subordinates
- Managing the team and owning project deliverables
- Clear and concise documentation skills
- Clear understanding of IT control domains listed in ISO 27001
- Experience IT Security Standards along with ISO 27001
- Good to have experience in assessing Standard Information Gathering (SIG) framework
7
Offshore & Vendor Risk Management Analyst Resume Examples & Samples
- In partnership with other VRM inventory governance, maintain inventory of vendors who conduct business outside of the U.S
- Through the existing VRM process, assess and identify risks specifically related to vendors who conduct business outside of the U.S
- Support SVP and Business Units in the review and validation of functions to offshore
- Support SVP in the development and maintenance of offshore policy and procedures
- Participate in firm-wide projects and initiatives related to the use of offshore vendors/resources
- Bachelor degree or 5+ years with focus in Risk Management or Financial Services Compliance; required
- Knowledge of information security and risk controls; required
- Experience working with offshore vendors; preferred
- Series 7 & Series 24 or willingness to obtain
8
Vendor Risk Management Analyst Resume Examples & Samples
- Support the VRM Program to effectively manage vendor risk in accordance with internal policy and regulatory requirements, ensure strong oversight of all vendor risks and provide visibility of existing and emerging risks
- Based upon Risk Classification, complete analysis of risk factors for VCI’s vendors (including any subcontractors with access to customer information) and ensure the respective business owners are monitoring, reviewing, and mitigating risk associated with service providers using the following risk factors: Regulatory Compliance, Legal, Transactional, Financial Stability, Market Reputation, Operational, Business Continuity/Disaster Recovery, and Information Security
- Working with the appropriate business users and experts, ensure that for any identified risk that require mitigating action, including vendor disengagement, a plan is developed and executed that indicates the process and/or service involved, the outgoing vendor, the replacement vendor, the anticipated timeline, measurable milestones, expected completion date and the plan for contingencies should an orderly transition not occur
- Monitor compliance with VRM Policy and General Procedures in dealings with vendors for the supply of goods and services to VCI
- Maintain established relationships with the Business and applicable stakeholders to ensure proper execution and compliance with VRM policies and procedures
- Act as a subject matter expert to assist the business in identifying and mitigating risks on their vendor relationships
- Assist in the reporting of vendor risk management activities
- Ensure all vendor relationships are documented in the VRM system and all contracts related to vendors that provide outsourced services are uploaded in the system
- Promote and deliver continuous training and awareness to Business partners on vendor risk
- Assist in the management of the VRM system which is VCI’s central repository for vendor contracts and related documents and is the record of all vendor due diligence and issue management
- Stay abreast of regulatory environment in regards to VRM
- 5-7 years– Overall Financial Services experience
- 0-3 years – Financial Analysis
- 3-5 years – Field and/or Service Operations
- 3+ years – Experience managing service providers/supplier relationships (Required)
- MBA or Masters in related field
- Analytical and conceptual thinking – using logic and reason, creative and strategic
- Integration – joining people, processes or systems
- Risk Analysis
- Knowledge of Federal regulations regarding service providers
9
Vendor Risk Management Analyst Resume Examples & Samples
- Partner with colleagues across multiple business units to help drive completion of assigned vendor risk assessments
- Develop and maintain program metrics utilizing a robust Excel data sheet
- Develop positive working relationships to maintain an open environment for collaboration, risk identification and remediation
- Maintain a current understanding of relevant vendor risk management best practices and regulations
- Bachelor degree or 3+ years with focus in Risk Management, required
- Knowledge of information security and risk controls, required
- Knowledge of Vendor Management or Supply Chain functions, required
- Experience with financial services or other highly regulated industries, required
- Advanced Excel skills, required
- CISSP or CISA, preferred
- Ability to forge solid relationships and collaborate with business partners, including the ability to convey complex information/knowledge in an understandable and clear manner
- Strong organizational skills with attention to detail, in order to meet deadlines in an environment of continually changing priorities
10
Director, Vendor Risk Management Resume Examples & Samples
- Leads the implementation of strategic change within the Vendor Risk Assessment team. Assists the VP and SVP in setting the VRA change agenda. Develops reporting and metrics which enable the effective management of VRA team core processes and support the business in identifying and managing Vendor Risk. Liaises with Operational Risk, Enterprise Procurement, the Security teams and Business partners to consistently enhance the Company’s visibility into Vendor Risk through shared processes, reporting and communications
- Leads the India Vendor Risk Assessment team in executing Vendor Risk Assessments per Company policy and SLAs. Employs appropriate re-engineering to streamline processes and enhance line of business experience and process planning. Leads the implementation and maintenance of supporting systems and data. Improves and manages process, controls, training and feedback to create a high-performing team
- Create and maintain the VRM policy, procedure manuals and systems documentation. Create training and presentations when needed and lead employee and business partner training as required to implement change and drive integration of the Vendor Risk framework
- Bachelors degree or equivalent
- 7-10 years of experience
- Strong analytical, organizational, and time management skills
- Strong ability to lead, partner, and influence across all leadership levels
- Demonstrated people leadership experience, either through direct leadership or coaching/mentoring roles
- Ability to drive results and meet deadlines to reduce risks
- Masters degree, preferred
- Solid understanding of regulatory requirements for the managing of third parties risk
- Prior experience in implementing a vendor risk program
- Strong process design experience
- Strong conceptual thinking skills and ability to organize and understand data
11
Vendor Risk Management Officer Resume Examples & Samples
- Experience in a Bank with knowledge of US Banking regulations
- 5+ years of Managerial experience with proven ability in leading dynamic teams
- Ability to chair meetings with senior management and communicate across a matrixed organization
- Ability to work both independently and with team members, under tight deadlines
- Evidence of strong leadership capabilities or previous management experience
- Series 7, 24 and/or 63/66 a plus
12
Vendor Risk Management Senior Specialist Resume Examples & Samples
- Identify, categorize and evaluate “Core Processes” and “Non-core Processes”, using a “Risk-Based Standard”, for potential or current service providers; delivering to the company leadership a risk-based ranking of business critical processes and/or services which are provided and/or delivered by an independent third party
- Create and institute policies and procedures to conduct onsite risk analysis for strategic and consumer facing vendors
- Lead and complete risk analysis for onsite assessments, with the assistance of the business, for VCI’s consumer facing vendors, ensuring consistent execution
- Maintain a process for the resolution of conflicts, misunderstandings and differences in contractual interruptions between the vendor and VCI organizations
- Working with the appropriate business user and experts, ensure that for any identified risks that require mitigating action, including vendor disengagement, a plan is developed and executed that indicates the process and/or service involved, the outgoing vendor, the replacement vendor, the anticipated timeline, measurable milestones, expected completion date and the plan for contingencies should an orderly transition not occur
- Ensure all vendors are classified and assessments completed in accordance with the VRM policy
- Ensure all vendor relationships are documented in the VRM system and all contracts related to vendors that provide outsourced services are uploaded in the system in accordance with the VRM policy
- Manage the functionality of the VRM system which is VCI’s central repository for vendor contracts and related documents and is the record of all vendor due diligence and issue management
- Influence, provide leadership and guidance to the business, Legal, Compliance, Purchasing, and other stakeholders to ensure requirements of VRM are fully understood
- Work with the, Legal, Compliance, Information Risk Management, Purchasing, and Internal Audit to ensure consideration of third party risk within their own risk domain framework
- Monitor compliance with VRM Policy and General Procedures
- Maintain detailed VRM Policies and Procedures
- Ensure a robust communication and training plan to facilitate the effective application and awareness of VRM across senior management, the business, and applicable stakeholders
- Ensure compliance and operational risk controls are in accordance with VCI and/or regulatory standards and policies; and optimize relations with regulators by addressing any issues
- Provide to senior leadership reporting of the “Risk Based” vendor evaluation, identifying all areas of material risk and the potential source of the identified risk
- Provide to senior leadership reporting that covers all vendors which provide “Core Process” to the organization, identifying those vendors and/or processes which represent the greatest threat of risk to the organization
- Develop and provide reporting of all unresolved conflicts, misunderstandings and differences in contractual interruptions, as well as the planned course for resolution, including the source of dispute; the parties involved, anticipated timelines, measurable milestones and expected resolution date
- Ensure obligatory OFAC checks are completed for current and prospective vendors
- 7-10 – Overall Financial Services experience
- 3+ years – Vendor Risk Management
- 3+ years – Financial Analysis, including cost/benefit studies
- 5+ years – Experience managing service providers/supplier relationships. Experience (or leadership) in enterprise initiatives such as SAP implementations, business re-engineering, process improvement, or other relevant initiatives
- Bachelors of Arts or Science
- Analytical and conceptual thinking – using logic and reason, creative, and strategic
- Communication skills – interpersonal, presentation, and written
- Computer savvy – skilled in the use of software
- Service provider relationship management
- Process Outsourcing Management
13
Director, Vendor Risk Management Resume Examples & Samples
- Oversee and perform the day-to-day responsibilities of the Vendor Risk Management Program
- Lead cross-functional team in the vendor risk assessment process. This includes representatives from Strategic Sourcing, Finance, Legal, Enterprise Architecture, Security Services and Enterprise Risk Management
- Work closely with Strategic Sourcing and Legal on vendor onboarding, implementation, issue resolution and off boarding
- Work closely with business partners to evaluate inherent vendor risks to OCC
- Develop and maintain effective working relationships with vendors to create open channels of communication and ensure vendor alignment with OCC’s initiatives, priorities and goals
- Ensure transparency within OCC by developing standardized reports and templates to inform management on vendor risk and performance
- Assess and monitor vendor performance against contractual commitments. Escalate unresolved or major issues impacting OCC business to management, including recommendations to pursue service level remedies where appropriate
- Conduct applicable vendor business reviews
- Continually review best practices for vendor risk management and make applicable changes to the program
- Requirements
- Excellent skills in business, financial, problem solving and analysis
- Proficient in Microsoft Word, Excel, Access, and PowerPoint
- Experience with ERM solutions
- Experience with vendor risk management solutions (preferred)
- Education & Experience
- MBA (preferred)
- Six plus years of related work experience in vendor risk management, procurement or financial services industries
14
Manager, Vendor Risk Management Resume Examples & Samples
- Six plus years of progressive experience leading a vendor risk management program
- Proven track record of successfully managing a variety of vendor relationships in a complex environment with a focus on IT vendors
- Strong written and oral communication skills. Ability to effectively communicate to all levels of the organization, including senior management
- Experience with Archer vendor risk management module (preferred)
- Undergraduate degree in Finance, Business or other related area
15
Vendor Risk Management Resume Examples & Samples
- Must be a team player and foster a collaborative environment for a team of people with various levels of experience and skills set
- Ability to analyze issues and resolve issues with creative solutions
- Attention to details and the ability to dive deep
- Experience working in Financial Services
- Familiar with Contracts Risk Management
- Strong Planning and Time Management
- Proficiency in Microsoft Word, Excel, PowerPoint and SharePoint
- Years of experience 10-12 years
16
Vendor Risk Management Analyst Resume Examples & Samples
- Perform 3rd Party Vendor Risk Assessments
- Demonstrate understanding of information security “best practices” including principles, security protocols and standards material such as OWASP Top 10 and SANS/CIS Critical Security Controls
- Bachelor degree in Computer Science or Computer Information Systems; or equivalent experience
- 2+ years experience with 3rd Party Risk Management
- 1+ years experience in the use of GRC tools such as RSA Archer, Modulo, MetricStream or other
- Understanding and knowledge of information security standards and laws (e.g., ISO 27001/27002, NIST, FFIEC, etc.), and commonly used concepts, practices and procedures within the information security and privacy field
- Direct experience developing, implementing, and improving technology controls in a corporate environment
17
Senior Vendor Risk Management Analyst Resume Examples & Samples
- Provide analysis and recommendations for identified security exceptions; participate in defining remediation efforts
- Articulate communicator, demonstrating mastery of both spoken and written English, with the ability to tailor deliverables appropriately for audiences ranging from technical to senior executive
- Leverage skills and experience to further evolve, mature, and improve organizations abilities through continuous improvement
- Professional certification; such as CISA, CRISC, or CISSP Certifications preferred
- Excellent communication skills and be able to write, speak and present to all levels of management
- Strong organizational ethic to manage a large volume of competing tasks effectively
18
Vendor Risk Management Analyst Resume Examples & Samples
- 2+ years’ experience with 3rd Party Risk Management
- 5+ years’ experience with performing security risk analysis and compliance assessments
- 1+ years’ experience in the use of GRC tools such as RSA Archer, Modulo, MetricStream or other
19
Risk-vendor Risk Management Specialist Resume Examples & Samples
- Assisting the Regional Head in managing the VRM Programme in the APAC region
- Managing the VRM programme for assigned countries in the region
- Excellent written and presentation skills; ability to influence key decision makers and senior management
- Strong analytical skills in terms of
- Strong project management and organizational skills; ability to prioritise
- Highly self-motivated; robust decision making capability
- Ability to endorse and promote change and change management
- Ability to travel in the APAC region
20
VP-vendor Risk Management, Santa Ana Resume Examples & Samples
- Performs personnel actions including performance appraisals, disciplinary actions, and interviewing candidates for employment; supervises the daily activities of the team including, but not limited to, effective delegation of assignments, developing work schedules and providing necessary training. Responsible for the overall direction, motivation, coordination and evaluation of functionalities within the unit
- Partners with SVP to develop, implements, oversees, and reports on Vendor Risk Management processes, tools, policies, standards, and procedures ensuring alignment with the Bank’s Enterprise Risk Framework program
- Serves as support for SVP in line of defense for all third party vendor risks; ensures new or emerging risks are consistent with the Board approved risk appetite; and escalates inconsistent risks timely
- Maintains the Bank’s approved Vendor List and ensures all vendors are appropriately added or removed in accordance with the Vendor Risk Management Program. Timely communicates updates to the approved Vendor List to Business Unit Owners, Accounts Payable, and other constituencies, as appropriate
- Ensures approved vendor criticality is appropriate, monitors for changes, and communicates changes to Information Security, Business Continuity, and other constituencies, as appropriate
- Implements internal service level agreements (SLA’s) with third party business unit owners and ensures all vendor requests are addressed by the vendor risk department within the predetermined SLA’s
- Develops ongoing oversight to ensure due diligence process of third party relationships with vendors and the business owners in order to meet business and organizational requirements
- Responsible for ensuring overall compliance with the vendor risk program, assists business unit owners in meeting program requirements, and reviews all regulatory requirements. Ensures Bank’s Vendor Management Program aligns with OCC and other applicable regulatory requirements
- Performs third party risk assessments, identifies issues and/or control gaps, and recommends remediation initiatives
- Conducts annual third party vendor management training, together with the Deputy CRO, for all third party business unit owners
- Prepares departmental reports for the Senior Executive team and/or the Board of Directors as requested
- Ensures the Vendor Risk Management Program and Policy are annually updated and approved by the appropriate Bank and/or Board Committee
- Ensures that resources and infrastructure are adequate to support the management of third party vendors throughout the enterprise; conveys the Bank’s needs and objectives, and ensures necessary controls are in place and working as designed
- Maintains vendor relationships through industry conferences, on site meetings and telecommunication efforts, maintaining and ensuring no conflicts or appearance of conflicts of interest arise
- Treats people with respect; keeps commitments; inspires the trust of others; works ethically and with integrity; upholds organizational values; accepts responsibility for own actions
- Demonstrates knowledge of and adherence to EEO policy; shows respect and sensitivity for cultural differences; educates others on the value of diversity; promotes working environment free of harassment of any type; builds a diverse workforce and supports affirmative action
- Follows policies and procedures; completes tasks correctly and on time; supports the company’s goals and values
- Performs the position safely, without endangering the health or safety of themselves or others and will be expected to report potentially unsafe conditions. The employee shall comply with occupational safety and health standards and all rules, regulations and orders issued pursuant to the OSHA Act of 1970, which are applicable to one’s own actions and conduct
- Performs other duties and projects as assigned
- Working knowledge of operational risk, third party guidance, and related controls; Federal Financial Institutions Examination Council (FFIEC), Business Continuity, etc
- Strong focus and capabilities to lead and prioritize multiple responsibilities simultaneously
- Effective planning, organizational, time management, issue resolution and decision-making skills
- Strong relationship development and leadership skills
- Solid presentation and reporting skills of in-house tools and databases; heavy understanding within Microsoft Office (Excel, PPT, etc.)
- Effective organizational and time management skills
- Ability to collaborate to achieve objectives and influence others, build teams and communicate effectively with Senior Management
- Ability to assess processes (including process mapping), identify and drive improvement execution, and have relationship management and conflict resolution skills
- Ability to monitor new regulatory guidance/pronouncements that may directly or indirectly affect the department and recommend and/or implement any necessary changes to maintain compliance with the new law, rule, or regulation
- Ability to read, analyze and interpret common technical journals, financial reports and legal documents
- Ability to make decisions that have significant impact on the immediate work unit and cross functional departments
- Ability to make informal and formal presentations, inside and outside the organization; speaking before assigned team or other groups as needed
- Ability to deal with complex difficult problems involving multiple facets and variables in non-standardized situations
- Bachelor’s Degree and/or equivalent; or minimum eight (8) years’ related experience and/or training with vendor management; or the equivalent combination of education and experience
- Prior banking and/or financial services industry experience preferred
- Project management execution and integration background; scoping, planning and managing of large scale initiatives preferred
21
Senior Analyst, Vendor Risk Management Resume Examples & Samples
- Ability to read and understand a contract
- Experience working with various stakeholders at all levels,
- Experience managing multiple different tasks and job duties simultaneously
22
Analyst, Vendor Risk Management Resume Examples & Samples
- Assist in managing the Bank’s vendor lifecycle phases of planning, due diligence, contract negotiation, ongoing monitoring and termination, and work directly with the Firm’s Due Diligence and Control Groups to review vendor risk assessment results and mitigation of risks
- Assist in the coordination of the Affiliate Service Level Agreement (SLA) management program, including risk assessments, agreement drafting, periodic cost and service level reviews, meeting minute reviews, and Bank Committee presentations
- 1-3 years of relevant experience in risk management or sourcing in the financial services industry is a plus
- Ability to manage ambiguity and bring focus with recommendations on solving tactical and strategic challenges
23
Vendor Risk Management Resume Examples & Samples
- Meet often with stakeholders to align on category strategic initiatives to reduce risk and costs
- Analyze category data and metrics to drive procurement category strategies
- Develop supplier scorecards to measure and track supplier performance
- Facilitate business reviews to discuss best practices and issues and to ultimately improve supplier performance and strengthen business partnership
- Innovate within the procurement space, automating and/or improving tools or processes to better support the procurement lifecycle
- Provide support throughout the contracting process and management of contracts post-execution
- 10+ years of professional experience
- 3+ years of experience in roles involving Vendor or Supplier Third Party Risk and Oversight (TPO)
- Experience influencing and communicating effectively at all levels of an organization
24
Senior Manager of Vendor Risk Management Resume Examples & Samples
- Perform managerial functions, including but not limited to making employment decisions regarding hiring, promoting, demoting and terminating, conducting performance appraisals and coaching and developing staff
- Develop, implement, communicate, monitor and maintain all TCF Information Systems Security policies and procedures. Develop and implement new security standards for multiple system platforms and environments. Coordinate all audit activities (internal and external) associated with Information Security to ensure ongoing compliance
- In conjunction with IT Leadership, lead the development and implementation of enterprise-wide security programs and solutions as defined by strategy and architecture. Collaborate with business leadership to facilitate changes such as centralizing user support, migrating from an application to an enterprise solution, or implementing new automation. Develop, maintain and communicate technical security strategies, plans, trends and effective security practices with Senior Business and Technology executives, customers, and employees
- Provide strategic and tactical security guidance for IT initiated projects, including the evaluation and recommendation of technical controls and solutions, architecture and utility of external technical solutions and resources
- Coordinate the leverage and use of new external resources, involved in the Information Security program, including but not limited to assessment, selection, and contracting. Manage existing vendor resources to determine and establish maximum utility
- Direct the specialized activities of the Information Security team administering and/or monitoring one or more of the following: intrusion detection/prevention, antivirus/antimalware, Data Loss Prevention (DLP), forensics, event monitoring, IT Controls Assurance, Threat and Vulnerability Management, Security Operations, Security Architecture, and Identity and Access Management
- Review the development, testing and implementation of security plans, products and control techniques. Identity potential threats and respond to violations. Provide technical and consultative expertise for user and Information Security staff in Risk Management and the implementation of appropriate data security procedures and products
- Maintain an awareness of existing and proposed security standard setting groups, State and Federal legislation, and regulations pertaining to Information Security. Identify regulatory changes that will affect TCF policies and standards and recommend necessary changes. Work with the Compliance and Legal departments for overall updates, procedure changes or development, and resolution of issues
- Responsible for conducting Security Awareness throughout the Corporation to communicate necessary Security Policies and Procedures or respective individual accountabilities
- 4-year degree in Computer Science, a related discipline, or equivalent work experience
- 10 years of experience in Information Technology or Information Security (IS)
- 5 years of experience in an IT or IS leadership or management role
- Experience in an Information Security role in one of the following: Identity Management, Threat and Vulnerability, Information Security Application Management
- Experience with security components related to multiple system platforms, operating systems, software communications and network protocols
- Strategic and tactical analysis, consultative, decision making and communication skills
- Communicate with business clients, IS management and staff, vendors, consultants and auditors
- Direct supervision and related management duties of the Vendor Risk Management team
25
Vendor Risk Management Consultant Resume Examples & Samples
- Promotes and supports the Vendor Risk Management Program for third party service providers in a manner that fulfills the mission and strategic goals of BOKF while complying with company policy and regulatory guidelines. Continually meets with business partners and vendors to draft required risk assessments, SOC1 reviews, and request necessary due diligence. Serves as the liaison in communicating issues, follow-up items, and resolutions to all parties. Understands the business needs for products and services as well as the risks associated with the corresponding vendor activity. Collects and reviews required due diligence for completeness, including but not limited to, vendor financials, third party audit reports, data sensitivity assessments, business resumptions plans and interviews vendor references to facilitate the best risk management decision by the company. Works closely with internal departments that specialize in particular areas of risk, i.e., Information Security, Financial, Business Continuity, Fair Banking, and Financial Crimes to assess risk vendors may pose to the bank. The incumbent will be required to apply their vendor expertise to a given set of facts to make an informed business decisions. The incumbent will be required to communicate their selection of a course of action among several alternative scenarios to executive management when engaging new and current vendor issues
- Performs ongoing Third-Party risk assessments within guidelines provided by each Functional Discipline which include ongoing third party reviews for Information Security, Financial, Business Continuity and Fair Banking
- Continually enhancing methodology to ensure compliance with regulatory expectations and industry best practices. Continuous learning of federal and state banking regulations. Works closely with the Compliance department in responding to federal bank audits. Works closely with the Information Security department in performing annual third party audits
- Will instruct all levels of management on the proper methods to collect vendor due diligence. Instructs business units on vendor risk program requirements; facilitates initial third party on-boarding with Accounts Payable; and leads the annual vendor reviews for the business units. Reviews and updates procedures, security questionnaires, and other forms, as necessary
- Serve as the centralized vendor owner for strategic vendors servicing multiple business units. Coordinate with multiple business unit representatives to complete all due diligence requirements and establish scorecards to monitor and report on the performance metrics for strategic vendors
- Categorize vendors based on established criteria including outsourced and foreign based vendors. Coordinate with business unit vendor owner to assigned an initial risk rating and update the risk rating annually based on vendor performance, compliance, data management, and service engagement
- Competent in one or more abilities below