Vendor Management Risk/Contract Management Officer Job at NASA Federal Credit Union
Overview:
Level II: All Level I responsibilities and the following:
Level I:
Our generous benefit package includes:
Employees are required to be
fully vaccinated
unless legally entitled to an accommodation for a disability (including medical conditions) or a sincerely held religious belief, practice, or observance.
Responsibilities:
NASA Federal Credit Union is seeking a Third Party Compliance Specialist to identify and mitigate risk related to third parties engaged throughout the Credit Union. The Third Party Risk Specialist will collaborate with key stakeholders in performing risk assessments, due diligence, ongoing oversight, and quality assurance activities involving the Credit Union’s third-party relationships. This position will apply thorough knowledge of risk best practices, standards, and regulatory requirements (e.g., NCUA, FFIEC, PCI, SOC, etc.) as they relate to third party management and protection of confidential and/or proprietary information of the Credit Union. In addition, this position will also apply working knowledge in understanding terms and conditions of contracts to identify, offer mitigating controls, and potentially negotiate towards a solution on contractual risks, as well as contribute strong technical/functional understanding of third-party risk management methodologies, workflows, and software solutions.
Essential Duties and Responsibilities: include the following. Other duties may be assigned.
Level I:
- Remains cognizant of and adheres to Credit Union policies and procedures, and regulations pertaining to financial institutions, including the Bank Secrecy Act, and OFAC.
- Maintains a working knowledge of third-party risk regulations applicable to financial institutions, including the appropriate due diligence documentation required to satisfy compliance requirements related to service provider due diligence and ongoing oversight.
- Participates in all third-party due diligence processes and works with the Credit Union’s subject matter experts, third-party relationship owners, Information Security Oversight Committee, and third parties, as needed.
- Assists with efforts to ensure enterprise-wide requirements for due diligence, risk assessment, and ongoing oversight are met, in accordance with Credit Union policy, federal regulations, and industry best practices.
- Participates in thorough onboarding activities, including project and/or third-party risk assessment, and provides quality assurance of all information and documentation, as applicable to the third-party product/service to be provided.
- Assists with the maintenance and retention of third-party risk management database.
- Collaborates with third party relationship owners to track, measure, report, and evaluate third party risk, and complete third-party risk assessments, as applicable.
- Participates in identifying, analyzing, and summarizing inherent and residual risk postures of third-party relationships.
- Collaborates with business continuity coordinator to track, measure, report, and evaluate third-party resiliency.
- Assists with administrative functions with Governance, Risk and Compliance (GRC) software used for third party risk management, including procedures, training, and access.
- Assists with enterprise-wide communications, reporting, and metrics on the Third-Party Risk Program.
- Participates in identifying and analyzing conditions, with input from management and key stakeholders, for third parties requiring risk exceptions/acceptance and documents, escalates and retains approval, as needed.
- Assists with contract management in the review, status tracking, execution and return of copies of signed contracts.
- Assists with the Credit Union’s procurement process in the review, status tracking, execution and return of copies of signed orders.
- Assists supervisor with the assessment of the Credit Union’s User Access Control (UAC) Program, to include policy management, ongoing monitoring of the UAC Program, and reporting to the Credit Union’s Information Security Oversight Committee.
- Supports Risk Management Department functions, as well as other projects and duties, as assigned.
- Actively supports and embraces our core values in all interactions.
Level II: All Level I responsibilities and the following:
- Acts as administrator of Governance, Risk and Compliance (GRC) software used for third party risk management, including procedures, training, and access.
- Maintains Third-Party Risk Program documentation, such as policies, procedures, metrics, and reports.
- Identifies and analyzes conditions, with input from management and key stakeholders, for third parties requiring risk exceptions/acceptance and documents, escalates and retains approval, as needed.
- Ensures contracts are evaluated and negotiated to maximize value and mitigate risk to the Credit Union.
- Maintains the third-party risk management database
- Analyze Third-Party Risk Program data to ensure data accuracy and integrity and establish associated reports and metrics.
- Consult and collaborate with third-party relationship owners to ensure timely execution of third-party risk management activities.
- Consult and collaborate with appropriate departments to enhance the Credit Union’s procurement process to maximize value and mitigate risk to the Credit Union.
- Participates in the Credit Union’s UAC Program, to include policy management, ongoing monitoring of the UAC Program, and reporting to the Credit Union’s Information Security Oversight Committee.
Level I:
- Minimum of three years of third-party risk experience.
- A Bachelor’s degree from accredited college in relevant field preferred.
- Financial institution knowledge/experience preferred.
- Experience in contract work is helpful, but not required.
Level I:
- Minimum of three years of third-party risk experience.
- A Bachelor’s degree from accredited college in relevant field preferred.
- Financial institution knowledge/experience preferred.
- Certification in this field or paralegal or legal degree or work equivalent. At least 12 months experience in contract work is required.
Our generous benefit package includes:
- $72,500 - $110,000 / Annually (based on experience and level)
- 401(k) match to 6% of earnings – immediate enrollment and 100% vesting
- Choice of two health plans
- Dental
- Vision
- Life Insurance – no cost
- Long-term Disability Insurance – no cost
- Employee Assistance Program – no cost
- Paid vacation
- Paid sick time
- 11 Paid holidays
- Profit Sharing eligible
- Pet Insurance
- Identity Theft Protection
Please Note :
ajayjain.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, ajayjain.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, Site.com is the ideal place to find your next job.