Risk & Third-Party Risk Specialist

The Risk & Third-Party Risk Specialist supports the Bank's risk management and third-party risk management activities, with particular emphasis on fintech and other higher-risk third-party relationships. This technical staff position performs due diligence, ongoing monitoring, risk and control assessments, and related analysis to identify, evaluate, document, and escalate risk across third-party relationships, products, processes, and controls. The position works collaboratively with business units and control functions to support effective risk mitigation, sound governance, and compliance with applicable Bank requirements and regulatory expectations.

Key Responsibilities:

• Perform risk assessments and due diligence for prospective and existing third parties, including fintech partners, evaluating risk areas such as regulatory compliance, information security and cybersecurity, data privacy, financial condition, operational resilience, business continuity, concentration risk, subcontractor/fourth-party risk, and reputational risk.
• Conduct enhanced due diligence and ongoing monitoring for fintech and other higher-risk third-party relationships, including review of relevant policies, procedures, control documentation, audit and assurance reports, financial information, business continuity and disaster recovery materials, compliance documentation, and other risk information.
• Assist with the performance of risk and control assessments of Bank processes, products, services, and third-party activities by identifying inherent risks, documenting key controls, evaluating control design and implementation, and supporting the determination and documentation of residual risk.
• Analyze control evidence and testing results to identify gaps, weaknesses, or emerging risks; clearly document conclusions and escalate material concerns or items requiring management attention.
• Support risk reviews associated with new fintech partnerships, new products or services, material changes to existing arrangements, and changes in a third party's risk profile, operations, ownership, technology, or control environment.
• Perform periodic and event-driven third-party reviews in accordance with established risk tiering, due diligence, and monitoring requirements, and ensure supporting documentation is complete and current.
• Monitor third-party performance, risk indicators, incidents, audit results, control exceptions, regulatory developments, and other relevant information for changes that may affect the Bank's risk exposure.
• Assist in assessing third-party incidents, control failures, service disruptions, data or security events, compliance concerns, and other material events; document risk impacts and support appropriate escalation and remediation tracking.
• Track identified risk issues, findings, exceptions, and remediation activities; review supporting evidence, follow up on open items, and escalate overdue, unsupported, or higher-risk remediation matters.
• Maintain accurate third-party inventory, risk ratings, due diligence records, assessment documentation, issue records, and other information within applicable third-party risk management or governance, risk, and compliance systems.
• Identify and analyze concentrations, dependencies, critical service relationships, and fourth-party exposures that may create elevated or interconnected risk across the Bank's third-party portfolio.
• Develop and maintain risk metrics, key risk indicators, assessment summaries, and other reporting used to communicate third-party and operational risk trends, exceptions, and emerging concerns to management.
• Review third-party contract provisions and supporting documentation from a risk perspective and coordinate with Legal, Compliance, Information Security, Operations, and other stakeholders when required terms, controls, or risk mitigations require attention.
• Collaborate with fintech program owners, business units, Compliance, Legal, Information Security, Information Technology, Operations, Finance, and other stakeholders to obtain information, communicate assessment results, and support timely resolution of risk matters.
• Support internal audits, external audits, regulatory examinations, and other reviews by gathering documentation, preparing assessment support, responding to information requests, and assisting with remediation activities related to assigned areas.
• Assist with updates to third-party risk management and risk assessment procedures, tools, methodologies, and documentation based on regulatory expectations, internal requirements, lessons learned, and changes in the Bank's risk environment.
• Perform additional responsibilities and duties as assigned or requested by management for the purpose of supporting the Bank's risk management framework and facilitating corporate objectives.
• Must complete all required training, including Bank Secrecy Act/Anti-money Laundering training, suitable to their position within the bank.

Education & Experience Requirements:

• Bachelor's degree in…