third party risk manager

New American Funding

<div>Overview:
<p><b>
Position</b><b>: </b>Sr Risk Specialist</p><p></p><p><b><br>
Salary Range</b><b>: </b>$65,000 - $80,000 depending on experience, including full-time benefits</p><p><b><br>
Location</b><b>: </b>Remote</p><p></p><p><b><br>
JOB SUMMARY</b><b>: </b>The New American Funding (&ldquo;NAF&rdquo;) Third Party Risk Management (TPRM) team is responsible for the governance and oversight of NAF&rsquo;s third-party risk and for assessing the effectiveness of controls used to identify, monitor, and manage third-party risk throughout the third-party lifecycle.</p><p><br>
The Senior Risk Specialist &ndash; Third Party Management will report to the TPRM Risk Lead and play a key role in supporting, enhancing, and maturing the TPRM Program. This role incorporates select leadership and program-development responsibilities while remaining hands-on in execution. The Senior Risk Specialist will support risk assessments, due diligence activities (DDA), ongoing monitoring activities (OMA), and issue management across the full third-party lifecycle.</p><p><br>
This individual must be a strong communicator and multitasker who understands that different risk domains require tailored, risk-based management approaches to be effective. The role requires close collaboration with vendors, internal business partners, and fellow risk professionals to ensure a consistent, unified, and practical approach to third-party risk.</p>
Responsibilities:
<ul><li>Support all stages of the third-party lifecycle, including vendor intake, onboarding, inherent risk assessments, due diligence, ongoing monitoring, issue remediation, and offboarding</li><li>Assist in the implementation, enhancement, and ongoing administration of TPRM tools, workflows, and risk management platforms</li><li>Provide risk-based guidance to business units to support informed vendor selection and engagement decisions</li><li>Assist in the enhancement and maintenance of TPRM policies, procedures, standards, and governance documentation</li><li>Partner with other risk managers to support the development and use of a consistent risk taxonomy across risk domains</li><li>Contribute to the development and implementation of contract compliance and oversight activities</li><li>Assist in the development of dashboards, metrics, and reporting to support leadership, audit, and regulatory needs</li><li>Support program automation and process improvements to increase efficiency while maintaining strong risk oversight</li><li>Track and manage DDA, OMA, findings, and action plans through ticketing systems and risk management platforms</li><li>Conduct analysis to identify single-source dependencies, concentration risk, and vendor criticality</li><li>Build and maintain strong relationships with vendors and internal business partners to support timely issue resolution</li><li>Serve as a subject matter resource to junior risk specialists and support knowledge sharing across the team</li><li>Support audits, exams, and internal reviews related to third-party risk management</li></ul>
Qualifications:
<ul><li>College degree preferred</li><li>4+ years of experience in Third Party Risk Management, Vendor Management, or Risk Management within a regulated financial services or mortgage environment</li><li>Strong understanding of the full third-party lifecycle and regulatory expectations related to third-party risk</li><li>Working knowledge of eGRC and third-party risk management platforms</li><li>Experience with ticketing systems and workflow-based risk tools</li><li>Knowledge of key risk domains including, but not limited to: AML, Business Continuity, Compliance, Cyber Security, Financial, Human Resources, Privacy, Reputational, SSAE/SOC reporting, and Technology Risk</li><li>Demonstrated ability to apply risk-based judgment, recognizing that not all risk domains require the same management approach</li><li>Strong experience with ongoing monitoring activities, including oversight meetings, issue tracking, and exit strategies</li><li>Excellent written and verbal communication skills, with the ability to communicate effectively across technical and non-technical audiences</li><li>Strong organizational skills with attention to detail and adherence to deadlines</li><li>Proficient in Microsoft 365 (Outlook, Excel, Word, PowerPoint, Teams)</li><li>Ability to work independently while also being a strong team player</li><li>Proven ability to manage multiple priorities in a fast-paced environment</li></ul><div></div><div><b><br>
Other Duties:</b> This job may require frequent sitting or standing for long periods of time. This job profile is not intended to be an all-inclusive list of job duties and responsibilities, as one may perform additional related duties as assigned in order to meet the needs of the organization.</div><div><b>
Work Authorization:</b> Must be able to verify identity and employment eligibility to work in the U.S.</div><div><b>
Physical Demands:</b> The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Must be able to lift up to ten pounds. Primary functions require sufficient physical ability and mobility to work in an office setting; to stand or sit for prolonged periods of time; to occasionally stoop, bend, kneel, crouch, reach, and twist; to lift, carry, push, and/or pull light to moderate amounts of weight; to operate office equipment requiring repetitive hand movement and fine coordination including use of a keyboard; and to verbally communicate to exchange information. VISION: See in the normal visual range with or without correction. HEARING: Hear in the normal audio range with or without correction.</div><div>
[EOE/M/F/D/V. Drug-free workplace.]</div><div></div><div><br>
#LI-JS3</div><div>
#LI-REMOTE</div></div>

Sr. Risk Specialist

Genworth

<div><p>At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care&mdash;and we bring those experiences with us to work in serving our millions of policyholders each day.</p><p></p><p>
We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism.</p><p></p><p>
Our four values guide our strategy, our decisions, and our interactions:</p><ul><li><b>
Make it human. </b>We care about the people that make up our customers, colleagues, and communities.</li><li><b>
Make it about others. </b>We do what's best for our customers and collaborate to drive progress.</li><li><b>
Make it happen. </b>We work with intention toward a common purpose and forge ways forward together.</li><li><b>
Make it better. </b>We create fulfilling purpose-driven careers by learning from the world and each other.</li></ul><p><br>
</p><p><b>POSITION TITLE</b></p><p>
Senior Manager, Third-Party Risk Management (TPRM)</p><p></p><p><b>
POSITION LOCATION</b></p><p>
Richmond, VA</p><p></p><p><b>
YOUR ROLE</b></p><p>
At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. As part of the Risk organization, this role works with cross-functional teams to understand the risks that face our company and execute risk management strategies that enable we&rsquo;re there for our customers and their families &ndash; now and in the future.</p><p></p><p>
Job Summary</p><p>
The Senior Manager, Third-Party Risk Management (TPRM) leads the day-to-day execution and ongoing maturity of the organization&rsquo;s third-party risk program. This role is accountable for strengthening governance, streamlining and automating workflows, improving risk intelligence, and enabling leaders to make real-time, risk-informed decisions through effective TPRM tooling, dashboards, and reporting. The Senior Manager partners closely with stakeholders across Technology, Operations, Sourcing/Vendor Management, Legal, Privacy, Compliance, and Business Owners to ensure third-party risk is understood, managed, and monitored across the third-party lifecycle&mdash;from intake and due diligence through contracting, onboarding, continuous monitoring, and offboarding.</p><p></p><p>
Key Outcomes</p><ul><li>
A measurably mature, scalable, and consistent TPRM program (policy-to-process alignment, standardized controls, and clear governance)</li><li>
Leaders have timely, actionable, and trusted risk insights (dashboards, KRIs, real-time status, and decision-ready summaries)</li><li>
The TPRM tool set is actively used and optimized&mdash;enabling faster cycle times, better data quality, and automation of manual steps</li><li>
Strong engagement with management and business stakeholders&mdash;clear accountability, escalations handled appropriately, and risk accepted with informed approvals</li><li>
Continuous monitoring and issue/remediation management reduce exposure and improve vendor performance over time</li></ul><p></p><p><b>
What you will be doing</b></p><p>
Program Leadership and Maturity</p><ul><li>
Drive the TPRM maturity roadmap, including improvements to governance, policies/standards, workflow design, tiering methodology, and lifecycle processes</li><li>
Establish and maintain program operating rhythms (e.g., monthly risk reviews, KPI/KRI reporting, issue remediation tracking, and executive readouts)</li><li>
Identify gaps and implement enhancements to ensure program scalability, consistency, auditability, and alignment with regulatory/industry expectations</li><li>
Develop and maintain standard operating procedures, templates, playbooks, and training to ensure consistent execution</li></ul><p></p><p>
Stakeholder and Management Interaction</p><ul><li>
Serve as a trusted advisor to senior leaders and business owners, translating third-party risk into clear decision options</li><li>
Facilitate risk discussions, challenge risk assumptions appropriately, and ensure documented risk decisions, exceptions, and approvals align to governance</li><li>
Partner with Sourcing/Vendor Management to embed risk requirements into intake, sourcing, and ongoing vendor management</li><li>
Collaborate with Legal, Privacy, Compliance, and Information Security to ensure contract provisions, control expectations, and due diligence are aligned and enforceable</li></ul><p></p><p>
TPRM Tooling, Automation and Decision Enablement</p><ul><li>
Own day-to-day management and optimization of the organization&rsquo;s TPRM technology stack</li><li>
Configure and enhance workflows</li><li>
Develop real-time dashboards and reporting for leaders: portfolio risk views, assessment status, SLA adherence, open issues, renewals, concentration risk, and critical vendor oversight</li><li>
Improve data quality and establish a single source of truth for third-party risk inventory, risk ratings, and decision history</li><li>
Define and track KPIs/KRIs (cycle time, backlog, critical findings aging, remediation performance, override rates, exception trends)</li></ul><p></p><p>
Third-Party Risk Assessments and Lifecycle Management</p><ul><li>
Oversee third-party risk assessments, including inherent risk tiering and due diligence</li><li>
Ensure assessment scope and depth are appropriate for vendor criticality, data sensitivity, and service impact</li><li>
Drive effective issue management and remediation tracking, including escalation paths for overdue or high-risk items</li><li>
Establish and maintain processes for periodic reassessments, and continuous monitoring of high-risk/critical vendors</li></ul><p></p><p>
Governance, Reporting, Audit and Regulatory Support</p><ul><li>
Support internal/external audits and examinations, ensuring evidence, artifacts, and controls are well documented and repeatable</li><li>
Maintain third-party governance materials (policies, risk appetite alignment, RACI, committee presentations, risk acceptance frameworks)</li><li>
Provide reporting and insights to governance forums and leadership committees</li></ul><p></p><p>
People Leadership (as applicable)</p><ul><li>
Lead, coach, and develop a team of TPRM professionals</li><li>
Set performance expectations, ensure workload prioritization, and build a culture of continuous improvement and strong business partnership</li></ul><p></p><p><b>
What you bring</b></p><p>
Required Qualifications</p><ul><li>
Bachelor&rsquo;s degree or equivalent practical experience</li><li>
8+ years of experience in third-party risk management, technology risk, operational risk, compliance, or related disciplines</li><li>
3+ years of experience leading programs and/or teams, influencing cross-functional stakeholders, and driving process maturity</li><li>
Proven experience implementing or optimizing TPRM programs and establishing a culture of continuous improvement</li><li>
Proven experience implementing or optimizing TPRM/GRC tools to improve workflow automation, data quality, and reporting</li><li>
Strong ability to translate risk into decision-ready recommendations for leaders and to facilitate risk acceptance discussions</li><li>
Demonstrated knowledge of third-party lifecycle practices: due diligence, control validation, contracting requirements, monitoring, and remediation</li></ul><p></p><p>
Preferred Qualifications</p><ul><li>
Experience in regulated industries (financial services, healthcare, insurance, payments, or similar)</li><li>
Familiarity with relevant frameworks and expectations (e.g., NIST, ISO 27001, SOC reports, shared responsibility models, vendor oversight guidance)</li><li>
Certifications such as CISA, CRISC, CISSP, CISM, or equivalent</li><li>
Experience integrating continuous monitoring signals (security ratings, threat intelligence, incident notifications) into a TPRM operating model</li></ul><p></p><p>
Core Skills and Competencies</p><ul><li>
Program maturity leadership: ability to design and scale governance, processes, and metrics</li><li>
Tool-driven execution: strong command of workflow automation, dashboards, and data-driven program management</li><li>
Communication: concise, practical storytelling with clear risk options and tradeoffs</li><li>
Stakeholder influence: confident partnering with business and technology leaders; able to challenge constructively</li><li>
Operational excellence: disciplined prioritization, SLA management, and attention to audit-ready documentation</li><li>
Risk judgment: balanced approach&mdash;protects the organization while enabling the business</li></ul><p><br>
</p><p><b>Employee Benefits &amp; Well-Being</b></p><p>
Genworth employees make a difference in people&rsquo;s lives every day. We&rsquo;re committed to making a difference in our employees&rsquo; lives.</p><ul><li>
Competitive Compensation &amp; Total Rewards Incentives</li><li>
Comprehensive Healthcare Coverage</li><li>
Multiple 401(k) Savings Plan Options</li><li>
Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)</li><li>
Generous Paid Time Off &ndash; Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave</li><li>
Disability, Life, and Long Term Care Insurance</li><li>
Tuition Reimbursement, Student Loan Repayment and Training &amp; Certification Support</li><li>
Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial &amp; legal management)</li><li>
Caregiver and Mental Health Support Services</li></ul><p></p><p><b>
ADDITIONAL
</b></p><ul><li>At this time, Genworth will not sponsor a new applicant for employment authorization for this position.</li></ul></div><p></p>

Senior Manager, Third-Party Risk Management

Contour Software

<div>
 <strong>
  About Contour
  <br/>
  <br/>
 </strong>
 Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.
 <br/>
 <br/>
 As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.
 <br/>
 <br/>
 What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!
 <br/>
 <br/>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 Constellation Payment Processing is a modern Payment Facilitator (PayFac) empowering SaaS businesses to grow revenue through seamless, embedded payments. As part of Constellation Software Inc. (CSI) &mdash; a global Canadian-based software leader &mdash; we combine the agility of a specialized payments company with the strength and stability of an established global powerhouse.
 <br/>
 <br/>
 The Compliance Specialist plays a key role in supporting CPP&rsquo;s enterprise compliance program with a strong emphasis on Third-party Risk Management (TPRM)/ Vendor Management (VM) and Internal Audits. This role ensures CPP maintains compliance with regulatory, contractual, and industry standards (including PCI and payment industry requirements) by assessing internal controls, monitoring third-party partners, and supporting cross functional initiatives.
 <br/>
 <br/>
 The ideal candidate is detail oriented, organized, and comfortable working in a fast-paced environment with multiple stakeholders, both internal and external.
 <br/>
 <br/>
 This role may require limited travel (&lt;25%) for conferences, training, or partner visits.
 <br/>
 <br/>
 <strong>
  What You&rsquo;ll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Third-Party Risk Management / Vendor Management
  </li>
  <li>
   Lead CPP&rsquo;s TPRM/VM Program, including onboarding, monitoring, reviewing, and offboarding of third-party service providers.
  </li>
  <li>
   Conduct third-party risk assessments, review SOC reports, security documentation, and monitor ongoing vendor performance.
  </li>
  <li>
   Own due diligence activities (questionnaires / information requests) and follow up on remediation items with internal business owners and external partners.
  </li>
  <li>
   Track vendor compliance obligations and ensure documentation is updated, accurate, and audit ready.
  </li>
  <li>
   Internal Audits &amp; Internal Control Monitoring
  </li>
  <li>
   Lead planning, executing, and documenting internal audits to assess the effectiveness of internal controls and processes.
  </li>
  <li>
   Perform control testing and work with stakeholders to identify gaps, inefficiencies, or risks.
  </li>
  <li>
   Support remediation efforts and follow up to validate completion of corrective actions.
  </li>
  <li>
   Maintain audit logs, evidence repositories, and internal tracking tools.
  </li>
  <li>
   Policy &amp; Procedure Support
  </li>
  <li>
   Assist in drafting, revising, and maintaining compliance related policies, standards, and procedures.
  </li>
  <li>
   Work with process owners to ensure documentation is accurate, current, and aligned with regulatory and industry requirements.
  </li>
  <li>
   Support policy governance activities, including review cycles and approvals.
  </li>
  <li>
   Merchant Compliance
  </li>
  <li>
   Assist merchant compliance initiatives, including tracking compliance statuses and assisting merchants with required documentation.
  </li>
  <li>
   Assist in communication efforts, including responding to merchant compliance questions or escalations.
  </li>
  <li>
   Maintain accurate records related to merchant compliance obligations.
  </li>
  <li>
   General Compliance Program Support
  </li>
  <li>
   Support risk assessments, control mapping, and compliance reporting activities.
  </li>
  <li>
   Maintain compliance documentation and audit trails.
  </li>
  <li>
   Assist with collection of evidence and documentation needed for external audits.
  </li>
  <li>
   Participate in cross functional projects to enhance compliance maturity and reduce organizational risk.
  </li>
  <li>
   Stay informed about relevant regulations, industry changes, and emerging risks within the payment ecosystem.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Basic Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Business, Compliance, Information Security, or related field&mdash;or equivalent professional experience.
  </li>
  <li>
   Strong understanding of control frameworks, compliance documentation, and audit processes.
  </li>
  <li>
   Excellent written and verbal communication skills.
  </li>
  <li>
   Ability to manage multiple priorities, meet deadlines, and maintain exceptional attention to detail.
  </li>
  <li>
   Proficiency with Microsoft Office (Word, Excel, PowerPoint) and willingness to learn compliance systems/tools.
  </li>
  <li>
   Analytical mindset with the ability to identify risks and evaluate controls.
  </li>
  <li>
   Strong organizational skills with consistent follow through.
  </li>
  <li>
   Ability to work collaboratively across technical and nontechnical teams.
  </li>
  <li>
   Professionalism, confidentiality, and sound judgment.
  </li>
  <li>
   Continuous learner with a proactive approach to problem solving.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience in the payments, fintech, or financial services industry.
  </li>
  <li>
   1&ndash;3+ years of experience in Compliance, Risk Management, Audit, Vendor Management, or related areas.
  </li>
  <li>
   Familiarity with:
  </li>
  <li>
   PCI DSS or other security frameworks
  </li>
  <li>
   SOC reports (SOC 1/SOC 2)
  </li>
  <li>
   Vendor risk management platforms or audit tools
  </li>
  <li>
   Experience responding to client security questionnaires or compliance inquiries.
  </li>
  <li>
   Familiarity with leveraging AI tools to streamline workflows, enhance communication, or support decision-making
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Exciting Benefits We Offer
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Market-leading Salary
  </li>
  <li>
   Medical Coverage &ndash; Self &amp; Dependents
  </li>
  <li>
   Parents Medical Coverage
  </li>
  <li>
   Provident Fund
  </li>
  <li>
   Employee Performance-based bonuses
  </li>
  <li>
   Home Internet Subsidy
  </li>
  <li>
   Conveyance Allowance
  </li>
  <li>
   Profit Sharing Plan [Tenured Employees Only]
  </li>
  <li>
   Life Benefit
  </li>
  <li>
   Child Care Facility
  </li>
  <li>
   Company Provided Lunch/Dinner
  </li>
  <li>
   Professional Development Budget
  </li>
  <li>
   Recreational area for in-house games
  </li>
  <li>
   Sporadic On-shore training opportunities
  </li>
  <li>
   Friendly work environment
  </li>
  <li>
   Leave Encashment
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <em>
   Disclaimer:
  </em>
 </strong>
 <em>
  At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.
  <br/>
  <br/>
 </em>
 <em>
  In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.
 </em>
</div>


Compliance Specialist

<div><div>About Contour</div><div></div><div><div>
Contour Software</div> has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.</div><div><br>
As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.</div><div><br>
What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!</div><div></div><div><div><div>
About The Role:</div></div><div><div>
Constellation Payment Processing is a modern Payment Facilitator (PayFac) empowering SaaS businesses to grow revenue through seamless, embedded payments. As part of <div>Constellation Software Inc. (CSI)</div> &mdash; a global Canadian-based software leader &mdash; we combine the agility of a specialized payments company with the strength and stability of an established global powerhouse.</div></div><div><div>
The Compliance Specialist plays a key role in supporting CPP&rsquo;s enterprise compliance program with a strong emphasis on Third-party Risk Management (TPRM)/ Vendor Management (VM) and Internal Audits. This role ensures CPP maintains compliance with regulatory, contractual, and industry standards (including PCI and payment industry requirements) by assessing internal controls, monitoring third-party partners, and supporting cross functional initiatives.</div></div><div><div>
The ideal candidate is detail oriented, organized, and comfortable working in a fast-paced environment with multiple stakeholders, both internal and external.</div></div><div><div>
This role may require limited travel (&lt;25%) for conferences, training, or partner visits.</div></div><div></div><div><div>
What You&rsquo;ll Do</div></div><div><ul><li><div>
Third-Party Risk Management / Vendor Management</div></li></ul></div><div><ul><li><div>
Lead CPP&rsquo;s TPRM/VM Program, including onboarding, monitoring, reviewing, and offboarding of third-party service providers.</div></li></ul></div><div><ul><li><div>
Conduct third-party risk assessments, review SOC reports, security documentation, and monitor ongoing vendor performance.</div></li></ul></div><div><ul><li><div>
Own due diligence activities (questionnaires / information requests) and follow up on remediation items with internal business owners and external partners.</div></li></ul></div><div><ul><li><div>
Track vendor compliance obligations and ensure documentation is updated, accurate, and audit ready.</div></li></ul></div><div><ul><li><div>
Internal Audits &amp; Internal Control Monitoring</div></li></ul></div><div><ul><li><div>
Lead planning, executing, and documenting internal audits to assess the effectiveness of internal controls and processes.</div></li></ul></div><div><ul><li><div>
Perform control testing and work with stakeholders to identify gaps, inefficiencies, or risks.</div></li></ul></div><div><ul><li><div>
Support remediation efforts and follow up to validate completion of corrective actions.</div></li></ul></div><div><ul><li><div>
Maintain audit logs, evidence repositories, and internal tracking tools.</div></li></ul></div><div><ul><li><div>
Policy &amp; Procedure Support</div></li></ul></div><div><ul><li><div>
Assist in drafting, revising, and maintaining compliance related policies, standards, and procedures.</div></li></ul></div><div><ul><li><div>
Work with process owners to ensure documentation is accurate, current, and aligned with regulatory and industry requirements.</div></li></ul></div></div><div><div><ul><li><div>
Support policy governance activities, including review cycles and approvals.</div></li></ul></div><div><ul><li><div>
Merchant Compliance</div></li></ul></div><div><ul><li><div>
Assist merchant compliance initiatives, including tracking compliance statuses and assisting merchants with required documentation.</div></li></ul></div><div><ul><li><div>
Assist in communication efforts, including responding to merchant compliance questions or escalations.</div></li></ul></div><div><ul><li><div>
Maintain accurate records related to merchant compliance obligations.</div></li></ul></div><div><ul><li><div>
General Compliance Program Support</div></li></ul></div><div><ul><li><div>
Support risk assessments, control mapping, and compliance reporting activities.</div></li></ul></div><div><ul><li><div>
Maintain compliance documentation and audit trails.</div></li></ul></div><div><ul><li><div>
Assist with collection of evidence and documentation needed for external audits.</div></li></ul></div><div><ul><li><div>
Participate in cross functional projects to enhance compliance maturity and reduce organizational risk.</div></li></ul></div><div><ul><li><div>
Stay informed about relevant regulations, industry changes, and emerging risks within the payment ecosystem.</div></li></ul></div><div></div><div><div><br>
Basic Qualifications:</div></div><div><ul><li><div>
Bachelor&rsquo;s degree in Business, Compliance, Information Security, or related field&mdash;or equivalent professional experience.</div></li></ul></div><div><ul><li><div>
Strong understanding of control frameworks, compliance documentation, and audit processes.</div></li></ul></div><div><ul><li><div>
Excellent written and verbal communication skills.</div></li></ul></div><div><ul><li><div>
Ability to manage multiple priorities, meet deadlines, and maintain exceptional attention to detail.</div></li></ul></div><div><ul><li><div>
Proficiency with Microsoft Office (Word, Excel, PowerPoint) and willingness to learn compliance systems/tools.</div></li></ul></div><div><ul><li><div>
Analytical mindset with the ability to identify risks and evaluate controls.</div></li></ul></div><div><ul><li><div>
Strong organizational skills with consistent follow through.</div></li></ul></div></div><div><div><ul><li><div>
Ability to work collaboratively across technical and nontechnical teams.</div></li></ul></div><div><ul><li><div>
Professionalism, confidentiality, and sound judgment.</div></li></ul></div><div><ul><li><div>
Continuous learner with a proactive approach to problem solving.</div></li></ul></div><div></div><div><div><br>
Preferred Qualifications:</div></div><div><ul><li><div>
Experience in the payments, fintech, or financial services industry.</div></li></ul></div><div><ul><li><div>
1&ndash;3+ years of experience in Compliance, Risk Management, Audit, Vendor Management, or related areas.</div></li></ul></div><div><ul><li><div>
Familiarity with:</div></li></ul></div><div><ul><li><div>
PCI DSS or other security frameworks</div></li></ul></div><div><ul><li><div>
SOC reports (SOC 1/SOC 2)</div></li></ul></div><div><ul><li><div>
Vendor risk management platforms or audit tools</div></li></ul></div><div><ul><li><div>
Experience responding to client security questionnaires or compliance inquiries.</div></li></ul></div><div><ul><li><div>
Familiarity with leveraging AI tools to streamline workflows, enhance communication, or support decision-making</div></li></ul></div></div><div></div><div><br>
Exciting Benefits we offer:</div><ul><li><div>
Market-leading Salary</div></li><li><div>
Medical Coverage &ndash; Self &amp; Dependents</div></li><li><div>
Parents Medical Coverage</div></li><li><div>
Provident Fund</div></li><li><div>
Employee Performance-based bonuses</div></li><li><div>
Home Internet Subsidy</div></li><li><div>
Conveyance Allowance</div></li><li><div>
Profit Sharing Plan [Tenured Employees Only]</div></li><li><div>
Life Benefit</div></li><li><div>
Child Care Facility</div></li><li><div>
Company Provided Lunch/Dinner</div></li><li><div>
Professional Development Budget</div></li><li><div>
Recreational area for in-house games</div></li><li><div>
Sporadic On-shore training opportunities</div></li><li><div>
Friendly work environment</div></li><li><div>
Leave Encashment</div></li></ul><div></div><div><i>
Disclaimer:</i><i> At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.</i></div><div></div><div><i>
In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.</i></div></div><div></div>

Diyar United Company

<div>
 <p>
  <strong>
   Position Overview:
  </strong>
 </p>
 <p>
  The Vendor Management Officer is responsible for overseeing the end-to-end lifecycle of third-party service providers engaged by the bank. This role ensures that vendors comply with contractual, regulatory, operational, and security requirements, while supporting ongoing performance monitoring and risk management.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <ol>
  <li>
   Vendor Onboarding &amp; Due Diligence :
  </li>
 </ol>
 <ul>
  <li>
   Conduct initial and periodic due diligence on new and existing vendors.
  </li>
  <li>
   Coordinate with Legal, Risk, Compliance, IT Security, and Procurement to ensure regulatory compliance.
  </li>
  <li>
   Verify vendor documentation including licenses, certifications, and financial reports.
  </li>
  <li>
   Facilitate vendor registration and onboarding processes.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  2. Contract &amp; SLA Management
 </p>
 <p>
  Review and track vendor contracts, amendments, and renewals.
 </p>
 <p>
  Ensure SLAs, KPIs, and compliance standards are clearly defined.
 </p>
 <p>
  Support contract negotiations with Legal and Procurement.
 </p>
 <p>
  <br/>
 </p>
 <p>
  3. Vendor Performance Monitoring
 </p>
 <p>
  Monitor vendor performance against approved KPIs and SLAs.
 </p>
 <p>
  Prepare performance scorecards and management dashboards.
 </p>
 <p>
  Conduct regular vendor review meetings.
 </p>
 <p>
  <br/>
 </p>
 <p>
  4. Risk Management &amp; Compliance
 </p>
 <p>
  Perform third-party risk assessments covering operational, cybersecurity, and regulatory factors. Monitor compliance with Central Bank regulations and internal governance frameworks.
 </p>
 <p>
  Support audits and ensure remediation actions are completed.
 </p>
 <p>
  <br/>
 </p>
 <p>
  5. Financial &amp; Operational Oversight
 </p>
 <p>
  Track invoices, payments, cost variances, and budgets.
 </p>
 <p>
  Support cost analysis initiatives. -
 </p>
 <p>
  Identify opportunities for cost optimization.
 </p>
 <p>
  <br/>
 </p>
 <p>
  6. Relationship Management
 </p>
 <p>
  Act as a primary point of contact with strategic vendors.
 </p>
 <p>
  Maintain strong relationships with internal departments and external providers.
 </p>
 <p>
  Resolve operational issues and escalate when necessary.
 </p>
 <p>
  <br/>
 </p>
 <p>
  7. Reporting &amp; Documentation
 </p>
 <p>
  Maintain updated vendor databases and contract repositories.
 </p>
 <p>
  Prepare risk, performance, and compliance reports.
 </p>
 <p>
  Document vendor interactions and evaluations.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications &amp; Requirements Education:
  </strong>
 </p>
 <p>
  Bachelor&rsquo;s degree in Business, Finance, Supply Chain, or related field.
 </p>
 <p>
  Experience: 2&ndash;5 years in vendor management, procurement, or risk (banking preferred).
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical Skills:
  </strong>
  Contract management, procurement systems, MS Office. Soft Skills: Communication, negotiation, analytical thinking, attention to detail
 </p>
</div>


Vendor Management Officer (Banking Sector)

Broadridge

<div><div>At Broadridge, we've built a culture where the highest goal is to empower others to accomplish more. If you&rsquo;re passionate about developing your career, while helping others along the way, come join the Broadridge team.</div><div></div><div>
Required Technical Skills</div><ul><li><div>
Bachelor&rsquo;s degree in computer science, Information Security, or a related discipline, or an equivalent combination of education, technical training, and work experience.</div></li><li><div>
3&ndash;5 years of progressive experience in Vendor/ Third-Party Risk Management and/or Information Security Risk Assessments.</div></li><li><div>
Demonstrated experience with Information Security Risk Assessments, Information Security auditing, controls verification, and Vendor / Third-Party Risk Management (TPRM).</div></li><li><div>
Strong understanding of third-party cyber security risk assessment methodologies, including inherent risk evaluation, residual risk analysis, control validation, and issue identification.</div></li><li><div>
Experience with risk analysis, risk matrix preparation, and control compliance validation.</div></li><li><div>
Familiarity with common compliance standards and frameworks such as SOX, SOC 2, PCI-DSS, GDPR, ISO 27001, HIPAA, and similar industry frameworks.</div></li><li><div>
Experience using and/or administering a Risk Management or GRC platform/tool.</div></li><li><div>
Ability to review assessment outputs for quality, accuracy, consistency, and alignment to internal standards and risk appetite.</div></li><li><div>
Strong understanding of vendor risk management principles, with the ability to clearly articulate concepts and guide others toward improved outcomes.</div></li><li><div>
Demonstrated flexibility to support a global operating model, including coverage across international time zones and rotational shifts if required.</div></li></ul><div></div><div>
Soft Skills</div><ul><li><div>
Excellent written and verbal communication skills in English.</div></li><li><div>
Strong analytical and critical thinking skills with attention to detail.</div></li><li><div>
Ability to manage multiple priorities, work independently, and meet or exceed deadlines.</div></li><li><div>
Strong stakeholder management and collaboration skills across internal teams and external partners.</div></li><li><div>
Ability to adapt to changing technology environments, business needs, and regulatory expectations.</div></li><li><div>
Proven ability to provide constructive QA feedback and influence process improvements.</div></li></ul><div></div><div>
Good to Have</div><ul><li><div>
Experience in a regulated industry such as financial services, pharmaceuticals, healthcare, or similar.</div></li><li><div>
Relevant certifications such as ISO 27001, CRISC, CCSK, CISA, CTPRP (Certified Third-Party Risk Professional), or similar.</div></li><li><div>
Technical knowledge to understand detailed issues related to cyber security, business continuity, resilience, privacy, and overall IT risk.</div></li><li><div>
Experience supporting program governance, metrics, reporting, or strategic transformation initiatives within a TPRM or Information Security function.</div></li><li><div>
Experience overseeing or validating work performed by external assessment vendors or managed service providers.</div></li></ul><div></div><div>
We are dedicated to fostering a collaborative, engaging, and inclusive environment and are committed to providing a workplace that empowers associates to be authentic and bring their best to work. We believe that associates do their best when they feel safe, understood, and valued, and we work diligently and collaboratively to ensure Broadridge is a company&mdash;and ultimately a community&mdash;that recognizes and celebrates everyone&rsquo;s unique perspective.</div><div></div><div>
Use of AI in Hiring</div><div>
As part of the recruiting process, Broadridge may use technology, including artificial intelligence (AI)-based tools, to help review and evaluate applications. These tools are used only to support our recruiters and hiring managers, and all employment decisions include human review to ensure fairness, accuracy, and compliance with applicable laws. Please note that honesty and transparency are critical to our hiring process. Any attempt to falsify, misrepresent, or disguise information in an application, resume, assessment, or interview will result in disqualification from consideration.</div></div><div></div>

Senior Member Technical

Sargent & Lundy

<div>Description:
<div>
Sargent &amp; Lundy is a leading consulting engineering firm specializing in the power and energy sectors. Since 1891, we have provided comprehensive engineering, design, and consulting services for both traditional and renewable power generation, grid modernization, nuclear power, and beyond. Our mission is to help clients achieve their energy goals effectively by leveraging advanced technologies and adopting sustainable practices.</div><h4 class="jobSectionHeader"><b>
Role Overview</b></h4><div>
Sargent &amp; Lundy is seeking a proactive, data-driven, and detail-oriented Senior GRC Analyst to lead key pillars of Governance, Risk, and Compliance (GRC) with a primary emphasis on enterprise Information Security, TPRM, contract governance, and cross-functional coordination with Legal and Procurement. You will own cyber training, communications, and phishing simulations, and drive measurable outcomes through strong data analysis and dashboard reporting (KPIs/KRIs). You will support audit readiness and regulatory alignment across frameworks such as ISO 27001, SOC 2, NIST CSF/171, and CMMC. You will also guide privacy-aligned practices (e.g., GDPR) and lead effective policy implementation through clear procedures, controls, and adoption plans.</div><p><b>
Essential Responsibilities</b></p><ul><li>
Lead and mature the Third-Party Risk Management (TPRM) program: Develop &amp; manage vendors inventory, conduct risk reviews of third-party vendors, define tiering/scoping, evaluate controls, track obligations/findings through closure, and standardize evidence retention in collaboration with Legal and Procurement.</li><li>
Drive strong contract management with Legal and Procurement: Standardize security and privacy clauses, review S&amp;L client contracts, negotiate requirements, and ensure obligations are tracked, owned, and reported.</li><li>
Own the security awareness &amp; training program end-to-end: Develop curriculum, coordinate communications, execute phishing simulations, analyze outcomes, and improve effectiveness using KPI/KRI dashboards and trend reporting.</li><li>
Administer and optimize GRC platforms and workflows (e.g., Hyperproof) to maintain visibility into risks, assessments, findings, and audit deliverables; establish SLAs and performance indicators.</li><li>
Develop risk management &amp; risk assessment practice, conduct risk assessments, develop and manage risk register with clear tracking of risks and accountability.</li><li>
Advance security governance by drafting, maintaining, and operationalizing policies, standards, procedures, and roles &amp; responsibilities; lead change management and communications to ensure policy implementation and adoption.</li><li>
Coordinate evidence and execute control readiness for ISO 27001, SOC 2, NIST CSF, CMMC (gap analysis, control testing, POA&amp;Ms), and support automation that reduces workload.</li><li>
Support privacy-aligned practices (e.g., GDPR): contribute to data classification/handling standards, data mapping/records of processing, privacy-by-design reviews, incident/breach alignment, and retention practices.</li><li>
Oversee governance for Business Continuity and Disaster Recovery and Backup &amp; Recovery in partnership with IT (plan maintenance, exercises, lessons learned, reporting).</li><li>
Lead cross-functional coordination with IT, HR, Finance, Legal, and business teams to embed compliance into operations and accelerate remediation of findings.</li><li>
 Manage security tasks/projects and report progress via standardized dashboards, scorecards, and executive-ready narratives, highlighting risk, performance, and trends. - Define, publish, and automate metrics &amp; management reporting (KPIs/KRIs) for training effectiveness, phishing trends, vendor risk, audit readiness, privacy/policy adoption, and control performance.</li><li>
Continuously upgrade information security skills, contribute to Information Security team skill development with playbooks, enablement sessions, and knowledge-sharing.</li><li>
 Support government contract compliance reviews and tracking, ensuring obligations are documented, monitored, and evidenced.</li></ul><div></div><div><b><br>
Core Areas of Responsibility (Scope)</b></div><br>
<div></div><ul><li>
 Information Security Governance, Policies, Standards, Procedures, and Roles &amp; Responsibilities.</li><li>
 Risk Management &ndash; Information security risk management and risk assessments</li><li>
Compliance management &ndash; Audit evidence management, audit coordination and compliance monitoring</li><li>
Third Party Risk Management - Third Party Risk Management, Vendor Assessments, Client Contract Reviews and obligation management.</li><li>
Security Awareness &amp; Training &mdash; including communications and phishing simulations: Hoxhunt and Mimecast</li><li>
 Coordination with IT, HR, Finance, Legal, and Business Teams. - Security Tasks/Projects Management.</li><li>
Metrics &amp; Management Reporting &mdash; strong emphasis on data analysis and dashboarding. Information Security Team Skill Development.</li><li>
Government Contract Compliance Reviews and Tracking.</li><li>
Deep Knowledge of Governance &amp; Privacy</li><li>
Policy lifecycle management and control mapping; demonstrated ability to translate policy into procedures/controls and drive organization-wide policy implementation and adoption.</li><li>
Privacy principles and GDPR-aligned practices (e.g., data classification/handling, data mapping/records of processing, privacy by design, incident/breach communications aligned to policy).</li><li>
 Compliance standards and frameworks (ISO 27001, NIST CSF, SOC 2, CMMC).</li><li>
 Third-party risk, software intake governance, audit readiness, and evidence management.</li><li>
Security &amp; TPRM Tools - TPRM platforms: ProcessUnity (Vendor Risk, Contract/Obligations, Issues/Findings tracking). - TPRM intelligence/workflow: OneTrust, BitSight (as applicable).</li><li>
GRC/risk registers: Hyperproof (risk, controls, evidence, audits). - Data analytics and reporting: Power BI and Excel (for KPI/KRI dashboards and executive reporting).</li><li>
Business Continuity and Disaster Recovery Process Oversight. - Backup &amp; Recovery Process Oversight.</li><li>
Mentoring, cross functional team collaboration and executive reporting</li></ul><div></div><p><b><br>
This position offers the flexibility of a hybrid schedule with the expectation of 3 days per week in our downtown Chicago office, and 2 days remote from home.</b></p>
Qualifications:
<h1 class="jobSectionHeader"><b>Required Qualifications</b></h1><ul><li>
 Bachelor&rsquo;s degree in computer science, information systems, or related field; or equivalent professional experience.</li><li>
5+ years in GRC or related domains, including leadership/ownership of programs or workstreams.</li><li>
 Strong understanding of ISO 27001, SOC 2, NIST CSF; experience with CMMC readiness.</li><li>
Practical knowledge of privacy and GDPR with the ability to implement policy via procedures, controls, communications, and training.</li><li>
Proven expertise in risk management, compliance operations, policy/standards, vendor risk, resilience, security training/awareness, and audit readiness.</li><li>
Advanced data analysis skills with the ability to design and maintain KPI/KRI dashboards, translate data into insights, and present executive-ready reporting.</li><li>
Familiarity with security technologies across on-prem and cloud environments; strong problem-solving and systems thinking.</li><li>
Professional certifications (e.g., CISSP, CISM, CRISC) are advantageous.</li></ul><h1 class="jobSectionHeader"><b>
Soft Skills</b></h1><ul><li><b>
Compassionate </b><b>Candor</b>: Provide candid, actionable feedback to enhance team performance and individual growth.</li><li><b>
Seek</b><b> to Understand</b>: Embrace curiosity and a commitment to continuous learning, fostering an environment of collaboration and innovation.</li><li><b>
We Before Me</b>: Actively collaborate and engage diverse perspectives to ensure collective success.</li><li><b>
Do What You Say</b>: Take ownership of commitments, prioritizing and delivering on key initiatives.</li><li><b>
Light Up Learning</b>: Encourage bravery in trying new ideas, sharing failures as opportunities for growth and learning.</li><li><b>
Driven by Passion</b>: Connect personal passion to the mission, demonstrating resilience in the face of challenges while pursuing organizational goals.</li></ul><div></div><div><b><br>
Why Join Us?</b></div><ul><li>
Work in an established company that values innovation and growth.</li><li>
Engage with a collaborative team that is dedicated to making a meaningful impact in the energy sector.</li><li>
Gain exposure to cutting-edge projects and contribute to data-driven decision-making processes.</li></ul><div></div><p><b><br>
We do not sponsor employees for work authorization in the U.S. for this position.</b></p><br>
<p></p>
Award-Winning Benefits:
<p>
At Sargent &amp; Lundy, we care about the health and well-being of our employees. Our commitment extends beyond the workplace, offering comprehensive healthcare plans and generous paid time off to support our team members in every aspect of their lives. We understand the importance of work-life balance, which is why we are proud to provide competitive, award-winning benefits. Our dedication to employee satisfaction has earned us the prestigious Top Workplaces Culture Excellence Award for compensation and benefits in 2022, 2023, and 2024.</p><p></p><div><div><div><b><br>
Health &amp; Wellness</b></div><div><b> Financial Benefits</b></div><div><b> Work-Life Balance</b></div></div><br>
<div><ul><li>
Health Plans: Medical, Dental, Vision</li><li>
Life &amp; Accident Insurance</li><li>
Disability Coverage</li><li>
Employee Assistance Program (EAP)</li><li>
Back-Up Daycare</li><li>
FSA &amp; HSA</li></ul><ul><li>
401(k)</li><li>
Pre-Tax Commuter Account</li><li>
Merit Scholarship Program</li><li>
Employee Discount Program</li><li>
Corporate Charitable Giving Program</li><li>
Tuition Assistance</li><li>
First Professional Licensure Bonus</li><li>
Employee Referral Bonus</li></ul><ul><li>
Paid Annual Personal/Sick Time (PST)</li><li>
Paid Vacation</li><li>
Paid Holidays</li><li>
Paid Parental Leave</li><li>
Paid Bereavement Leave</li><li>
Flexible Work Arrangements</li></ul></div><br>
</div>
Compensation Range: $100,010.00 - $144,190.00 Transparency Statement: Sargent &amp; Lundy discloses compensation ranges that comply with all local and state regulations. The total compensation package for eligible positions will include a base salary or an hourly rate and a comprehensive benefits package, reflecting our commitment to rewarding performance and supporting the overall well-being of our employees. Individuals may also be eligible to participate in our yearly discretionary bonus. Awards &amp; Recognition:
<div></div>
Equal Opportunity:
<div>
Sargent &amp; Lundy is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any protected status as defined by applicable law.</div></div>

Senior GRC Analyst

Search 10000+ Third party risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 third party risk manager jobs Near Me

Sr. Risk Specialist

Senior Manager, Third-Party Risk Management

Compliance Specialist

Compliance Specialist

Vendor Management Officer (Banking Sector)

Senior Member Technical

Senior GRC Analyst