Vendor Risk Manager

Drive strategic initiatives for vendor risk program, ensuring all risks are inventoried, measured, responded to where appropriate and in line with the growth of the organization.


The Vendor Management role will be responsible for onboarding and maintenance of vendor records. The role will require working with various stakeholders within the onboarding process and business lines to gather required information and documentation. The Vendor Manager will have oversight of management of vendor data and reporting.


Responsibilities
Governance
Develop and maintain governance and oversight to identify, assess, mitigate and report vendor risk.
Vendor Onboarding/Re-activation
Gather, review and process new vendor information requests
Collaborate with internal stakeholders to support vendor reviews such as cyber, data privacy, compliance, AML, financial, etc.
Liaise with contract management regarding execution of vendor contracts
Maintain Vendor Information
Gather, review and process vendor information
Support business initiatives to review key vendors
Identify and document dependencies amongst group entities and parent / child relationships among key vendors
Vendor Health and Risk Management
Monitor key performance indicators for select vendors
Support vendor risk initiatives within the organization
Identify gaps to internal and external benchmarks for select vendors, where appropriate
Offboarding of Vendors
Gather, review and support vendor offboarding process
Coordinate periodic review of vendors to identify potential duplications or consolidations
Develop periodic review process for vendor deactivations
Reporting
Provide reporting and transparency on vendor risk process to key stakeholders and governance structures
Records Management
Maintain consolidated list of vendors, affiliates, and third party relationships
Maintain auditable records for required recordkeeping timeframe
Other
Lead strategic initiatives related to vendor risk management
Training and education of stakeholders and business engaged in vendor risk
Perform adhoc analysis and project engagement, as needed
Recommendations for process improvements
Data clean-up efforts, as needed