- Facilitate onboarding of third party risk requests- this includes initial analysis to determine if a risk assessment is required and coordinating partnerships between Vendor Risk Specialist and Strategic Sourcing in the support of internal stakeholders through the third party onboarding process.
- Act as business unit liaison to understand business strategic priority alignment with suppliers and any potential new services/engagements
- Partner and coordinate closely with internal stakeholder areas (i.e. Information Security, Enterprise Risk Management, Business Continuity Program Office, Enterprise Procurement, Data Governance, Legal, Disaster Recovery, etc) to facilitate an expedited onboarding process for 3rd party service providers.
- Document streamlined path for onboarding, inclusive of vendor registration and minimum documentation requirements
- Review and identify opportunities for streamlining third party onboarding process and improving customer experience
- Review all incoming requests for new and renewal contracts and facilitate initial communication with requester, Vendor Risk Specialist and Strategic Sourcing to develop a plan to expedite time to contract signing
- Measure and monitor progress of supplier onboarding and report progress against established Key Risk Indicators
- Support facilitation and documentation of various reports, as needed
- Perform data analysis and draw conclusions as it related to vendor and contract data
- Champion the third party onboarding process purpose throughout the organization
- Provide training to CNB and CNB subsidiary colleagues with training to educate on best practices to improve third party onboarding in support of CNB’s Third Party Risk Management Policies and Procedures
- Escalate issues (delays; significant gaps; uncooperative parties; etc.) to management as required; work to resolve issues as needed
- Support various ad hoc projects supporting program enhancements, process improvements, and other functions
- Ad hoc duties, as assigned
- Bachelor's Degree or equivalent
- Minimum of 4 years of third party risk management experience in the financial services industry, conducting risk assessments, and reporting on KRIs
- Minimum of 3 years of experience in risk and controls identification, appropriately scoping assessments, and performing assurance testing.
- Minimum of 2 years working with a GRC system, incorporating continuous improvement for the system and process.
- Comprehensive knowledge of third party risk management processes and methodologies
- Comprehensive knowledge of the third-party risk management lifecycle: planning, due diligence, contracts, ongoing monitoring and termination
- Experience using third party risk management /Governance, Risk and Compliance (GRC) systems
- Experience with contracts, including master service agreements, statements of work, and license agreements.
- Industry recognized third party risk management or vendor management certification
- Six Sigma certification
- Experience assessing cloud servicing arrangements
- Strong project management skills (organizing, planning, reporting, documenting, driving tasks to closure, etc.)
- Strong analytical skills, working with data and drawing conclusions
- Excellent oral and written communication skills; ability to communicate with all levels of management; experience performing both detailed and executive-level documentation
- Advanced knowledge of Microsoft Office tools; specifically, Excel and PowerPoint
- Comprehensive healthcare coverage, including Medical, Dental and Vision plans, available the first of the month following start date
- Generous 401(k) company matching contribution
- Career Development through Tuition Reimbursement and other internal upskilling and training resources
- Valued Time Away benefits including vacation, sick and volunteer time
- Specialized health and family planning benefits including fertility benefits, and cancer, diabetes and musculoskeletal support programs
- Career Mobility support from a dedicated recruitment team
- Colleague Resource Groups to support networking and community engagement
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
*Represents basic qualifications for the position. To be considered for this position, you must at least meet the required qualifications. careers.cnb.com accepts applications on an ongoing basis, until filled.
Unless otherwise indicated as fully remote, reporting into a designated City National location is an essential function of the job.
