Manager, Vendor Risk

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Regular Full-Time Management Hybrid

Salary Range: $87,500.00 To $ Annually

At Municipal Credit Union, we believe that an incredible culture helps create a happy and motivated team that works hard to achieve the best results for themselves and their members. For more than 100 years, MCU has provided affordable financial products and convenient services to a membership base that is now comprised of over 600,000 individuals. With each new generation we have the pleasure of interacting with, we maintain the credit union promise of people helping people.

Be New York's most loved financial institution by helping our members build their best financial futures

The Vendor Risk Manager owns, develops, implements, enhances, and maintains MCU’s vendor risk management frameworks, taxonomies, policies, and procedures. The Vendor Risk Manager administers MCU’s vendor risk management program, ensuring compliance with NCUA, NYDFS, and FFIEC requirements and protecting the credit union from third-party operational and compliance risks

• Lead the end-to-end Vendor Risk Management Program in alignment with regulatory requirements (e.g., NCUA, NYDFS, FFIEC) and internal policies.
• Manage the vendor due diligence lifecycle including risk assessments, contracting support, ongoing monitoring, and offboarding processes.
• Facilitate periodic reviews of critical and high-risk vendors, including SOC reports, financial health, cybersecurity practices, regulatory compliance, and performance metrics.
• Collaborate with Enterprise Risk, Legal, Information Security, and business units to evaluate and mitigate vendor risks.
• Provides subject-matter expertise to business lines on vendor selection, onboarding, and risk remediation.
• Maintain the Vendor Risk Register and ensure vendor risk ratings are accurate and current.
• Coordinate with internal audit and external examiners on vendor risk management reviews.
• Develop and deliver periodic vendor risk reports to senior management and the Board, including risk exposure, trends, and performance metrics.
• Monitor regulatory changes and industry best practices to ensure continuous improvement of the Vendor Risk Management Program.
• Provide coaching and oversight to staff or cross-functional teams involved in vendor risk activities.
• Perform other related duties as requested and special projects as assigned.

• Bachelor’s degree required, advanced degree preferred.
• Minimum of 5 years of experience in the financial services industry required.
• Minimum of 5 years of risk management experience, with demonstrable knowledge in third-party vendor risk.
• Knowledge of operational risk management, regulatory compliance, general IT risk/IT operations, and financial industry business lines and workflows required.
• Preferred certifications:
  Certified Third-Party Risk Professional or Certified Regulatory Vendor Program Manager.
• Ability to perform in a high-volume environment and meet deadlines while maintaining exceptional attention to detail.
• Technologically proficient.

Our Core Values are an integral part of who we are and who we hire. By living our Core Values, every day, we continue to attract the best and brightest talent, achieve unsurpassed results and continuously challenge ourselves to be better than yesterday. These values are at the heart of our organization and within every teammate. To be a great fit, you’ll bring the following

Results - We are passionate about winning.

Agility - We proactively anticipate, respond and pivot to ensure MCU wins.

Integrity
- We operate with the highest ethical standards and highest degree of honesty.

Belonging
- We cultivate a culture of inclusion and teamwork.

Ownership
- We take personal responsibility and hold ourselves accountable for the results.

The pay range for this position is between $87, annually. Actual base pay offered may vary depending on a number of factors such as job-related knowledge, skills,…