Third Party Risk Officer - City National Bank of Florida
Miami, FL 33131
About the Job
Overview: Qualifications:
City National Bank of Florida relies on a network of Third Parties to provide products and services to enable and support operations throughout the institution. As a result, the bank's exposure to various risks is heightened. Inadequate onboarding and on-going management of Third Parties could result in security breaches, operational inefficiencies, legal action, financial loss, and severe damage to our reputation. To address this challenge, City National Bank of Florida has implemented a Third-Party Risk Management Program (TPRM) to identify and evaluate risks and provide proper oversight of our business relationships.
The Third-Party Risk Officer is responsible for the execution and oversight of the company's TPRM lifecycle requirements for engagements across multiple lines of business. The portfolio of engagements represents a significant base of critical and high-risk commercial relationships requiring comprehensive and rigorous oversight and compliance with the Third-Party Risk Management Policy and regulatory requirements. The Third-Party Risk Officer evaluates and monitors all aspects of the services; independently assesses increasing and emerging risks in the Third-Party space. In this role, the leader also assists with the development of enhancements to new or existing Third-Party policies and procedures and takes on any other responsibilities assigned by the Director that will be related to key initiatives and or other company businesses and functions. To be successful in this role, the Third-Party Risk Officer must be an effective change agent and collaborator, possess the skills and willingness to perform duties that are a combination of tactical, transactional, and strategic in nature. The role will offer a high level of visibility to key management stakeholders.
Principal Duties & Responsibilities:
- Partner with assigned business units and the Vendor Management Office to establish an appropriate engagement process to enable meaningful oversight and portfolio management and ensure business adherence to related risk policies, standards, and procedures.
- As the Second Line function, ensure that there is adequate oversight of the VMO, to include risk assessments for vendors, identification of critical vendors, cadence for periodic reviews, risk rating of vendors, documentation received by vendors at onboarding and/or during the lifecycle of the vendor engagement.
- Execute responsibilities articulated in the relevant policies pertaining to Third-Party Risk Management.
- Conduct and document deep dive reviews into significant current or emerging risk areas as they relate to Third-Party Vendors engaged with the institution.
- Ensure Lines of Business, Risk areas, VMO and TPRM are working jointly to ensure compliance of activities across the risk life cycle to include Contract Reviews, Information Security Reviews, and Ongoing Monitoring.
- In collaboration with relevant stakeholders, develop risk mitigation strategies and action plans as appropriate across commercial relationships.
- Oversee and or develop Ongoing Monitoring (OGM) plans in alignment with TPRM policy for newly onboarded Third Parties and ensures Business Owners are executing OGM plans for existing engagements.
- Execute Issue Management end-to-end activities (issue identification, prioritization, assignment, remediation, closure) for matters pertaining to Third Parties, as well as the Third-Party Program.
- Leverage core tools to provide effective oversight and challenge risk ratings and risk tolerance.
- Lead risk assessment cross-functional reviews to proactively identify inherent and residual risks related to new and existing contractual relationships.
- Conducts internal testing of dispute processes to ensure control.
- Acts as SME to senior stakeholders and /or other team members.
- 8-10 years Financial services industry with a specific focus on Third-Party Risk Management oversight preferred.
- 8-10 years Experience working with a mid-size (asset size $10-$40 billion) or larger U.S. Based financial institution.
- 5-7 years Enterprise Risk Management Experience desirable.
- Experience with Information Security frameworks and Standards is a plus.
- Knowledge of banking principles and regulations.
- Ability to effectively assess risks and lead credible challenge to influence improvements, controls, and standards.
- Ability to partner and work collaboratively across difference risk teams, functions, and Lines of Defense.
- Commitment to driving regulatory excellence and regulatory examination readiness.
- Ability to lead or support key TPRM project initiatives and other duties as assigned.
- Familiarity with industry compliance standards and regulations.
- Strong computer skills relevant to Microsoft Office Suites (e.g., Word, Excel, Outlook) includes the ability to use desktop, laptop, tablet and smartphone.
- Excellent verbal and written communication skills across levels of leadership.
- Bachelor's Degree Business, Finance, or another relevant field.
- Certifications a plus:
- CTPRP (Certified Third Party Risk Professional) preferred
- CTPRA (Certified Third Party Risk Assessor) preferred
- CISSP (Certified Information Systems Professional (CISSP) preferred
- CISA (Certified Information Systems Auditor) preferred
- Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.
- Please view Equal Employment Opportunity Posters provided by OFCCP here.
- The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)
- Reasonable accommodation may be made to assist individuals with disabilities to complete the online application process. Please contact our Human Resources Department at 305-577-7680 or by e-mail at employment@citynational.com.
#LI-NB1
Source : City National Bank of Florida