THIRD PARTY RISK MANAGEMENT LEAD WHAT IS THE OPPORTUNITY? Third Party Risk Management (TPRM) Lead is responsible for providing Enterprise wide third party risk management services, including taking a lead role to define, implement, and maintain a risk framework, operating model, policies, procedures, governance and oversight programs for all lines of business and subsidiaries. CNB established the TPRM program as a second line function, enabling CNB to manage third party risk effectively and efficiently, relative to its size and complexity. The lead is responsible for ensuring the program meets regulatory guidance, aligns with CNB's parent company, and incorporate changes as necessary. WHAT WILL YOU DO?
- In partnership with the TPRM Program Manager, develop a successful implementation plan consisting of: Assist with the development and execution of an TPRM risk framework, policies and procedures. Direct assessments on key controls and overall compliance with the TPRM program, including the timeliness, completeness, and accuracy of risk assessments. Provide risk-consulting serves to first line third party risk managers for complex arrangements. Develop risk analysis and reporting, including risk metrics, for dissemination to both first line of defense (technology) leadership, risk management committees, CNB's parent holding company, and CNB's regulators. Streamline processes for risk identification and assessment, control assessment, testing and issue management.
- Lead continuous improvement activities and initiatives for TPRM, working with stakeholders, subject matter experts, and analysis of exception reports to define issues, determine root cause, and determine appropriate changes.
- Identify and assess requirements for CNB's GRC system to increase automation, and process effectiveness and efficiency.
- Responsible for reviewing SSAE 18 reports for CNB's third parties and evaluate for completeness, appropriateness, and assess impact to CNB on findings and exceptions to support CNB's Sarbanes Oxley, FDICA, and SOC programs.
- Manage coordination of assignment of resources based on demand and capacity, and required subject matter expertise, including augmenting internal staff with external resources as necessary.
- Ensure appropriate escalate of issues to first line and senior management as required.
WHAT DO YOU NEED TO SUCCEED?
Required Qualifications - Minimum of 7 years of third party risk management, assurance and / or oversight or relevant supplier or third party audit or compliance experience
- Minimum of 4 years of experience in risk and controls for information technology and cybersecurity, appropriately scoping assessments, providing credible challenges, and performing assurance testing.
- Minimum of 4 years working with a GRC system, incorporating continuous improvement for the system and process.
Additional Qualifications - Comprehensive knowledge of third party and information technology risk management processes and methodologies
- Experience using third party risk management /Governance, Risk and Compliance (GRC) systems
- Experience assessing contracts, including master service agreements, statements of work, and license agreements.
- Experience assessing cloud servicing arrangements
- Knowledge of and experience in designing and operating governance, frameworks and processes to comply with vendor management / third party risk management related regulatory requirements, guidance and oversight (OCC 2013-29, Fed SR 13-19 or other relevant third party risk management / vendor management regulation applicable to the financial services industry)
- Currently hold or quickly obtain industry recognized third party risk management or vendor management certification
- Excellent oral and written communication skills; experience performing both detailed and executive-level documentation
- Advanced knowledge of Microsoft Office tools; specifically, Excel, PowerPoint and SharePoint
- Experience with reporting platforms such as Tableau, SQL scripts, and Microsoft SSRS desirable
WHAT'S IN IT FOR YOU? Compensation Starting base salary: $111,408 - $189,738 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.
Benefits and Perks At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues including:
- Comprehensive healthcare coverage, including Medical, Dental and Vision plans, available the first of the month following start date
- Generous 401(k) company matching contribution
- Career Development through Tuition Reimbursement and other internal upskilling and training resources
- Valued Time Away benefits including vacation, sick and volunteer time
- Specialized health and family planning benefits including fertility benefits, and cancer, diabetes and musculoskeletal support programs
- Career Mobility support from a dedicated recruitment team
- Colleague Resource Groups to support networking and community engagement
Get a more detailed look at our
Benefits and Perks .
ABOUT US Since day one we've always gone further than the competition to help our clients, colleagues and communities flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues today. City National is a subsidiary of Royal Bank of Canada, one of North America's leading diversified financial services companies. To learn more about City National and our dynamic company culture, visit us at
About Us .
INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT City National Bank fosters an inclusive environment where all forms of diversity are valued and leveraged to make us a better company and employer. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, veteran status or other basis protected by law.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Represents basic qualifications for the position. To be considered for this position, you must at least meet the required qualifications. accepts applications on an ongoing basis, until filled.
