Third Party Risk Assessor

Join to apply for the Third Party Risk Assessor role at Early Warning®.

At Early Warning, we’ve powered and protected the U.S. financial system for over thirty years with cutting‑edge solutions like Zelle®, Paze℠, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

This position is responsible for applying and supporting the Third Party Risk Assessment Program strategic vision in the execution of day-to-day functions and as it applies to Early Warning’s response to its customers and partners. This program ensures that third parties (including, but not limited to, new and existing customers, owner banks, and others external parties) meet the security, compliance, and reporting guidelines established by Early Warning.

• Adhere to, implement and manage third party risk assessment program processes in a manner that aligns with the strategic goals of the organization.
• Develop and engage in positive business relationships with external business partners and internal stakeholders to understand third party relationships.
• Develop an understanding of the service provided and/or received to assess and determine appropriate risk ratings.
• Review existing and new contracts with third parties to ensure Early Warning’s security, compliance or governance‑related requirements are being met.
• Drive all aspects of the risk assessment of the third party.
• Coordinate and respond to new and existing customer requests for onsite audits. Complete security, compliance or governance‑related questionnaires.
• Apply knowledge in security and regulatory frameworks (e.g., ISO 27000, GLBA, FFIEC, FDIC, NIST, etc.) to improve third party risk identification, assessments and reporting.
• Assess compliance with information technology (IT) controls by examining and analyzing records, reports, operating practices and documentation to determine risk ratings affecting compliance status.
• Write comprehensive, articulate and objective assessments, reviews, and audit reports outlining methodology, analysis and recommendations.
• Identify control breaks and vulnerabilities with third parties.
• Create meaningful reports to effectively communicate and relate security, compliance, or governance‑related concepts and controls across a variety of audiences including technical and non‑technical audiences.
• Effectively communicate and coordinate planning, preparation, execution, review and remediation phases of third party assessment activities.
• Support the company’s commitment to protect the integrity and confidentiality of systems and data.

• Education and experience typically obtained through completion of a Bachelor’s degree in Computer Science, Management Information Systems or related field.
• A minimum of 3 years of experience in IT Risk, Audit, Information Security or Assurance and strong audit/technical evaluation experience with various types of systems and networks.
• Strong cross‑functional project management skills.
• Attention to detail and ability to plan, organize and prioritize workloads.
• Highly motivated self‑starter with the ability to work independently or within a team environment.
• Effective written and verbal communication skills, interpersonal and collaboration skills and ability to support complex organizational relationships.
• Strong working knowledge of information security, risk, compliance and governance principles and issues.

• Professional information security certification (e.g., Certified Information Security Manager – CISM, Certified Information Systems Security Professional – CISSP, Certified Information Systems Auditor – CISA, Certified Third Party Risk…