Senior Business Analyst, TPRM

About This RoleAI processing…

Key Responsibilities

• 1
  Review and challenge Inherent Risk Questionnaires (IRQs), working with business owners to understand vendor relationships, validate information, and determine appropriate inherent risk and criticality ratings.
• 2
  Coordinate due diligence activities with cross-functional risk partners and subject matter experts across areas such as Information Security, Privacy, Compliance, Enterprise Risk Management, and Legal.
• 3
  Conduct business due diligence, including reviews of corporate registration, reputational information, insurance coverage, and other relevant documentation, and coordinate additional activities such as background checks.
• 4
  Manage assigned third party assessments through completion, coordinating with business owners and cross-functional risk partners to address questions, follow up on outstanding requirements, and escalate concerns as appropriate.
• 5
  Facilitate vendor approval processes with Chime’s bank partners, including coordinating assessment information, responding to follow-up requests, and tracking approvals through completion.
• 6
  Identify and document issues arising from TPRM assessments and partner with relevant stakeholders to track third party risk issues and remediation activities through resolution.
• 7
  Support ongoing monitoring and periodic reassessments of third party relationships, including reviewing changes that may impact the inherent risk rating, criticality rating, or due diligence requirements.
• 8
  Clearly document TPRM assessments, risk decisions, and supporting rationale in accordance with program requirements.
• 9
  Provide guidance to business owners and stakeholders on TPRM requirements, processes, and expectations.
• 10
  Contribute to the continued development and maturity of the TPRM program through process improvements, tooling enhancements, reporting, and updates to policies, procedures, standards, and supporting documentation.
• 11
  Support internal audits, regulatory examinations, bank partner oversight, and other program activities as needed.

Requirements

• 4+ years of experience in Third Party Risk Management, Vendor Risk Management, Operational Risk, Compliance, Audit, or a related risk management function.
• Experience with third party risk assessments, due diligence, and related third party risk management activities.
• Strong analytical and critical-thinking skills, with the ability to challenge information, identify gaps or inconsistencies, synthesize information from multiple sources, and make well-supported risk-based decisions.
• Strong stakeholder management and communication skills, with experience working across business owners, risk and control functions, and cross-functional teams.
• Strong organizational skills and the ability to manage multiple assessments, approvals, and competing priorities.
• Experience contributing to risk program initiatives such as process improvement, policy and procedure development, tooling enhancements, reporting, audit support, or similar activities.
• Familiarity with regulatory expectations and industry practices for third party risk management, including applicable interagency guidance.
• Experience in financial services, fintech, banking, or another regulated environment is preferred.
• Familiarity with Third Party Risk Management platforms, workflow tools, and reporting solutions is a plus.

Perks & Benefits