Senior Third Party Risk Management Specialist

Location: On site in location listed on job posting.

The Third-Party Risk Management (TPRM) specialist will support the TPRM Manager in successfully executing the First Horizon TPRM program. We are seeking an experienced individual specialized in the Third Party Risk Management framework with strong knowledge of regulatory heightened standards, and relevant industry certifications. In this role, you will be responsible for executing key components of our Third-Party risk management program within an established framework.

• Execute due diligence processes for onboarding new vendors and partners
• Partner with SME groups to conduct thorough risk assessments of third parties, including financial stability, operational resilience, information security, compliance and reputation risk evaluations
• Review and provide input on risk-based contract terms and SLAs with service providers
• Perform ongoing monitoring activities for assigned vendors and high-risk relationships
• Implement remediation plans for identified third-party control deficiencies.
• Document and maintain accurate records of all TPRM activities
• Apply solid understanding of applicable First Horizon policies, procedures, and practices to provide effective TPRM assurance
• Build sound business relationships across the enterprise to enable a strong understanding and close alignment with business needs, direction, and risk appetite
• Support the TPRM risk reporting and key metric processes and assist with coordinating and communicating results of third-party risk assessments and risk reassessments
• Respond appropriately to third-party risk or performance incidents, coordinating related investigations, and ensuring appropriate resolution
• Educate Line of Business teams on TPRM program and processes and participate in TPRM Training delivery
• Manage and maintain TPRM repositories, tools, and documentation for TPRM information risk assurance
• Support the TPRM Manager in managing the department routines including participating in business and risk meetings in the TPRM Manager’s absence
• Conduct real-time effective challenge at various stages of onboarding a third party
• Provide input into the TPRM Policy and System enhancements.
• Responsible for ensuring issues and risks are appropriately remediated or escalation protocols are followed

• Interagency guidance to heightened standards including Federal Reserve SR Ketter 13-19, FDIC FIL-44-2008, or global equivalents to daily TPRM activities
• Stay current with evolving regulatory requirements and industry guidance around third-party risk
• Support regulatory examinations related to TPRM and help prepare responses to regulatory inquiries
• Apply regulatory expectations to risk assessment and monitoring activities
• Help ensure third-party relationships comply with privacy regulations (GDPR, CCPA, etc.)

• Prepare comprehensive reports on third-party relationships
• Contribute data and insights for executive level dashboards and metrics
• Communicate effectively with stakeholders about third-party risk issues
• Collaborate with colleagues in SME departments
• Document findings, conclusions, and recommendations clearly and concisely

Experience

• +5 years of experience in third-party risk management, vendor management or related risk disciplines
• Demonstrated experience in first line (operational) roles
• Experience applying TPRM frameworks in regulated environments.
• Background working with regulatory examinations and responding to regulatory findings
• Track record of successful collaboration with stakeholders across business functions
• Discretion and diplomacy when dealing with sensitive issues
• Experience working across a diverse set of stakeholders with positive results
• Preferred advanced experience with MS Office, Coupa, and Teams

Knowledge

• Strong understanding of regulatory heightened standards for third-party risk management
• Knowledge of risk assessment methodologies and frameworks
• Understanding of contractual risk management principles
• Familiarity with procurement processes and practices
• Working knowledge of information security, business continuity, and operational risk concepts

Skills

• Excelle…