Corporate Senior Third-Party Risk Analyst

About The Role

The Senior Third-Party Risk Analyst will report to the Corporate Third-Party Risk Manager and serve in a lead capacity to manage, mature, and enhance the TPRM program. The role requires experience evolving risk management programs, including assessing current state processes, defining future state requirements, and executing strategic enhancements that drive efficiency, scalability, and enterprise value.

The Analyst collaborates with other Third-Party Risk Analysts and provides thought leadership across all aspects of the TPRM program, including governance, regulatory compliance, and design and implementation of program enhancements. The role plays a key part in the implementation and optimization of third-party risk management technology, configuring a new TPRM tool to align with regulatory, operational, and business needs while introducing enhanced features, streamlining workflows, and reducing stakeholder friction.

The position also manages and coordinates activities across the full third-party life cycle, including planning, ongoing monitoring, due diligence, and off‑boarding.

From a company-wide perspective, the Senior Analyst supports the program through training, communication, adherence, and continuous maturation efforts. Responsibilities include coordinating timely due diligence activities; exercising independent judgment and discretion, supporting risk mitigation efforts, and analyzing vendor financial conditions, business continuity, compliance information security, cybersecurity risk and the overall control environment to ensure alignment with GBCI standards. The role is responsible for identifying areas of risk or concern, recommending and implementing solutions, and supporting new automation, system functionality and product enhancements.

Additionally, the Analyst reviews required contract provisions and information security controls, provides effective challenge, and supports contract execution and ongoing contract management. This role requires significant cross-functional coordination and the ability to influence and gain buy‑in from stakeholders across the organization.

The position is part of our Enterprise Risk Management team, which supports senior management and the Board of Directors in assessing, identifying, mitigating, and monitoring the corporation’s key risks to protect its long-term safety and soundness. The department operates in a fast‑paced, evolving environment and requires the ability to maintain focus, adaptability, and productivity while managing competing priorities.

This is a Corporate position which may be located at an available bank division location across our nine-state footprint in AZ, CO, , MT, NV, TX, UT, WA, or WY. The entry rate for this position is $69,464.94 + / per year (calculated for Kalispell, MT).

All compensation offers are analyzed individually and take into consideration multiple factors including but not limited to geographic location, years of experience, and educational background.

WA Applicants ONLY:
Range $75,663.06 to $ per year

• Help lead the design, build, implementation, and optimization of third party risk management technology platform and supporting processes, including execution of strategic initiatives to modernize the TPRM operating model. Assess current state processes and technology capabilities, compare against regulatory expectations and future state requirements, and identify gaps requiring remediation or enhancement.
• Provide Program guidance for risk-based due diligence reviews across third and fourth party relationships. Utilize the bank’s risk profile framework to assess inherent risk and accurately risk-rate third parties, with particular focus on operational, information security, cybersecurity and compliance risk. Partner with Third Party Relationship Owners to facilitate completion of due diligence requirements, review and challenge provided due diligence. Escalate material risks and issues to third-party risk as appropriate.
• Develop, enhance and maintain the overall TPRM Program through updates to policies, procedures, governance, templates, technology, training and communication. Ensure…