Vendor Risk Analyst - Fidelity National Financial

POSITION OVERVIEW

Fidelity National Financial (FNF) is seeking a Vendor Risk Analyst to join our Third-Party Risk department. The Vendor Risk Management (VRM) program exists to assist the management of Fidelity National Financial in understanding and managing third-party vendor risks within the Company. This role includes engagement and communication with operational vendor managers, corporate control groups, and vendors (third parties) to identify and record the vendor use and potential risk related to the vendor’s product/service at any stage during the vendor lifecycle. Key responsibilities include memorializing the vendor on the VRM panel, identification of potential concerns/risks, remediation of any noted concerns/issues, determination of inherent and residual risk, performing the appropriate due diligence as defined in the VRM Policy, which takes into account measures for compliance with various entities. In addition, this position supports VRM by monitoring spend activities and/or alternative trending sources to proactively engage operational vendor managers to understand potential vendor usage.

LOCATION

• This role can sit 100% remote. If located near Jacksonville, FL – hybrid schedule available.
• Ability to travel up to 15%.

DUTIES & RESPONSIBILITIES

• Responsible for documenting and maintaining accurate vendor inventory in database.
• Interacts with Vendor Managers, IT/Security departments, legal partners, and/or vendors for onboarding and/or on-going management of third parties, including follow-up of these activities.
• Onboards third party products/services including performing/facilitating/documenting all efforts and results.
• Identifies potential areas of concern, issues or risks for remediation, where appropriate.
• Reviews details from the vendor engagement, including supporting materials (both provided and self-collected), to ensure the accuracy of engagement.
• Documents logic to support inherent risk of third-party engagement (i.e. tier).
• Conducts specified assessments, following instruction provided, on the third parties and identifies issues and/or concerns including residual risk.
• Reviews and evaluates insurance evidence.
• Continued monitoring and management of third-party engagements, as defined.
• Coordination of termination efforts, when applicable.
• Supports on-site vendor risk assessment process.
• Effectively communicates and collaborates with technical and non-technical individuals interacting with internal departments, including, but not limited to Operations, Legal, Information Security, IT, and Procurement.
• Accountable for identification and tracking of vendor issues and associated remediation plans, including reporting and escalation activities.
• Assists in continued improvement, maturity and acceptance of the organization’s third-party risk program, framework, processes and tools
• Other duties and projects as assigned.

MINIMUM REQUIREMENTS

• Bachelor’s Degree in a technology, security, business administration, accounting, finance, or related field is recommended, augmented by industry related training programs, and supported by work experience.
• Requires 4+ years of experience in assessing risks, processes and controls including experience with third-party, information security, physical security, legal, and other IT processes, and functions.

PREFERRED EXPERIENCE

• Recommended Certifications: CTPRP, CTPRA, TPCRA, CERP.