Job Description
A large investment banking client is looking for a Technology Vendor Risk Analyst to join Global Banking and Markets Third Party Risk Management & Strategy team. This team oversees the control framework and guides managers to implement oversight on a broad spectrum of processes managed by Vendors. This person will be responsible for vendor relationship owners and technology risk assessors - evaluting to see how their controls are working, how critical they are to Global Banking and Markets and if the standards meet the criticality of importance. They will be ensuring they are monitoring the 3rd party risk frameworks and held them accountable. This will entail putting together presentations for senior leadership and taking controls that have been assessed and challenging/validating the results.
Responsibilities will include:
- Supporting the division to ensure they comply with the firms Vendor Management (VM) programs
- Equipping Vendor Relationship Owners with skills, training, and awareness on their roles
- Engaging with Risk Partners across the organization (e.g., compliance, technology), as needed, helping the division to understand third party risks
- Reporting to divisional stakeholders on Vendor management activities, including outstanding risks oversights and ongoing initiatives
- Evaluating and providing guidance to key divisional stakeholders to support implementation and compliance with the Vendor Management Policy and Standard, and challenging divisional TPRM activities, where appropriate
- Engage with the divisional contacts to raise awareness of the third-party risk management framework as well as develop the risk management skills of all Vendor Relationship Owners
- Developing and providing periodic global and regional reporting on vendor landscape, risks, controls, and overall status of divisional execution against the program requirements
- Support and help lead aspects of global TPRM program initiatives and priorities, working with global program and capability leads, as well as the global team overall
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
- 2-3 Years within Technology Risk
- Experience with Shared Assessments including SOC 2 Reports and ISO 27001
- Knowledge of data standards - data encryption, industry standards around storage, data safety
Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.