Third Party Risk Specialist

About the role

A Third Party Risk Specialist role focused on identifying, assessing, and monitoring risks associated with vendors, suppliers, and other third parties to support effective risk management across the organization.

Requirements

• Experience in third party risk management, vendor risk, operational risk, or a related risk discipline

• Understanding of risk assessment frameworks and control evaluation methodologies

• Strong organizational skills with the ability to manage multiple assessments in parallel

• Excellent written and verbal communication skills for engaging stakeholders at various levels

• Proficiency in office productivity tools and familiarity with risk management systems

• Relevant professional certification or willingness to obtain one is a

Responsibilities

1. 1

   Conduct risk assessments of third party vendors and service providers, evaluating financial, operational, compliance, and cybersecurity risk factors

2. 2

   Maintain the third party risk register and ensure risk ratings are current and accurate

3. 3

   Coordinate due diligence activities, including questionnaires, documentation review, and follow-up with internal and external stakeholders

4. 4

   Monitor ongoing third party performance and escalate emerging risks or control gaps

5. 5

   Support the development and maintenance of third party risk policies, standards, and procedures

6. 6

   Prepare reporting and metrics on third party risk exposure for governance forums and senior management