Third-Party Risk Auditor​/Bank Supplier

coni + partner, established 1993, is a consultancy company with headquarters in Zurich and subsidiaries in Düsseldorf and Shanghai. We are specialised in custom-fit staffing in tune with the corporate culture by ensuring a perfect match of professional skills, references and personal as well as social skills of successful candidates.

Our client is the risk management of the procurement of an international bank in Zurich. We are searching for a process specialist (m, f, d) as

• Responsible for identifying and analysing third‑party risks relating to existing or new services and technologies provided by suppliers.
• Lead third‑party due diligence and onboarding processes for new suppliers.
• Ensuring that the Procurement’s third‑party portfolio is properly assessed, evaluated and managed in order to minimise risk and its impact.
• Monitor periodic reviews and ongoing supplier compliance as well as support supplier off‑boarding and lifecycle management.
• Carrying out targeted risk assessments of new suppliers in collaboration with the relevant business partners.
• Communicating the results of the risk assessment to all stakeholders in a timely manner and submitting findings relating to high and medium risks to the third‑party risk committee.
• Developing measures to improve the programme for managing risks posed by third parties, including updates to policies and procedures.
• Creating communication and escalation plans in connection with risk management relating to third parties.
• Responsible for ensuring compliance with the risk management guidelines in collaboration with third parties.
• Managing data and documentation from third parties, as well as records relating to system functionality and the reporting of suspicious activity.
• Ensuring compliance with all applicable internal and external regulations and guidelines, in collaboration with the Legal and Compliance Department and the relevant business departments.

• Bachelor’s or Master’s degree in Finance or Engineering.
• Professional experience at a bank, a Big Four firm, or a consultancy firm with projects in international companies.
• Knowledge of processes relating to third parties and supply chains, acquired through work within the bank (internal audit, risk management), when auditing banks (business or IT audit) or in management consultancy (outsourcing and risk management by third‑party providers).
• Experience in operational resilience, internal controls, BCM, etc.
• General knowledge of contract management and agreements with vendors, including master service agreements, data protection agreements, etc.
• Knowledge of regulatory frameworks as well as FINMA, EU regulations (DORA).
• Professional experience in developing processes and scenarios, analysing and evaluating incidents, and testing.
• Analytical personality with the ability to influence stakeholders based on facts.
• Team orientation with good communication skills.
• Interest in analysing processes, data sets, and control environments in detail.
• IT flair.
• MS Office, Excel, PowerPoint.
• German and English.