Risk Management - Sr Third-Party Risk Management Specialist

risk management - sr third-party risk management specialist job description

posted thursday, march 5, 2026 at 11:00 am

title: sr third-party risk management specialst
status: exempt
report to: manager – third-party risk management
department: risk management
job code: 11381
pay scale: $ - $ annually

general description:

the senior third-party risk management specialist is responsible for utilizing the credit union’s risk management framework to identify, assess, measure, monitor and help mitigate the financial, reputational, regulatory, and operational risks (among others) throughout the lifecycle of golden 1’s third-party relationships.

this individual will work to identify, assess, and create mitigation plans for third-party risks through the execution of the third-party risk management program specifically in the areas of third-party due diligence, risk assessment, and ongoing monitoring. Works with various internal stakeholders, including business owners, technology, information security, finance, compliance and legal to identify and assess third-party risks and implement controls and processes as well as monitor ongoing risks and mitigation efforts.

the senior third-party risk management specialist will provide a broad range of third-party risk analysis, reporting and/or support to various key stakeholders, including business owners, internal subject matter experts (smes) and third-party partners. This role must be a champion of our overall enterprise risk management approach and acts as a subject matter expert in providing guidance/advice on third-party risk-related matters.

assists in the development and deployment of various third-party risk management tools, practices, and policies used to analyze and report third-party risks, and to manage risks in alignment with an enterprise risk management framework. Provides key inputs into the company's risk management or other committees that oversee third-party management processes and ensures alignment with organizational objectives.

tasks, duties, functions:

• support all third-party risk management (tprm) activities to proactively identify, evaluate, and mitigate risks. Serve as a subject matter expert for third-party risk management.
• develop and direct third-party risk assessment and ongoing performance monitoring practices and procedures, as well as an annual review prioritization process. Supports internal stakeholders in third-party risk identification, assessment, and reporting.
• provide third-party risk management advisory services, education and training to leaders and business units across the organization. Independently facilitate or lead stakeholder meetings and management briefings on relevant issues, risks, or trends, associated with enterprise-level third-party risks.
• tactfully yet assertively challenge assumptions and perspectives on third-party risk throughout the organization. Recommend improvements to policies, procedures, and practices to reduce costs, improve internal controls and/or drive efficiencies.
• contribute to risk committee materials, including creating and updating third-party risk management reports and presentations on the evaluation of program effectiveness, level and direction of third-party risks, key and emerging risks, and status of previously identified risk and control issues.
• analyze third-party profile information to determine the tier/risk level classification of the third-party. Work with business owners and/or other key stakeholders to ensure correct classification of third-party. Coordinate the completion of third-party questionnaires and the fulfilment of the due diligence request list with the business owner, ensuring completion of all onboarding steps.
• provide initial and ongoing comprehensive assessments of the third party’s risk through review of due diligence, key stakeholder/sme evaluation of due diligence, risk assessment, and audited reports of controls. Schedule and conduct third-party risk assessment meetings with business owners and key stakeholders, as needed, and ensure appropriate signoffs are received.
• partner with assigned business units to ensure assessments are completed accurately and timely,…