Vendor and Technology Risk Management Analyst - Leader Bank

Leader Bank is looking for exceptionally dedicated team members to join one of the region’s fastest-growing community banks and mortgage lenders. At the time of its founding in 2002, Leader Bank had one branch office, $6.5 million in assets and 7 team members. Since then, the Bank has become one of the most successful banks in Massachusetts with $4.5 billion in assets, more than 400 team members, 7 branch offices, and annual mortgage originations of over $2 billion.

Exemplary products and an innovative spirit have driven Leader Bank’s rapid growth over the years, and our team members embrace these values. Our mission is to obsess over our clients, make them feel valued, and maintain long-term relationships with them by constantly enhancing our products and processes to always be improving our client experience. For our team members, Leader Bank prioritizes competitive compensation and benefits, a healthy work-life balance, and an environment that fosters diversity and inclusion.

Summary

The Vendor and Technology Risk Management Analyst is part of the Bank’s Technology Team, and its core responsibility is within the vendor and technology risk management program. The candidate should demonstrate a basic understanding of risk methodology, the ability to maintain the vendor risk process set by the organization, the desire to learn, and a willingness to work with outside vendors and other external stakeholders.

Responsibilities

• Responsible in assisting with the Bank's vendor management lifecycle in all phases from research, onboarding, ongoing monitoring, technical risk assessments, oversight monitoring and termination.
• Strong collaboration with the Bank’s vendor owners and other internal stakeholders to ensure vendor is properly identified and sufficient controls are in place to meet the regulatory requirements.
• Assist the Bank’s Chief Technology Officer with liaise with vendor owners and vendor management solution provider.
• Analyze and collect vendor and technology risk assessment questionnaires, support vendor on-boarding, off-boarding, manage & gather due diligence document collection, assist with contract negotiations, and manage all required ongoing monitoring efforts.
• Engage with vendor owners and other stakeholders to review vendor performance metrics and vendor risk scorecards.
• Conducts thorough assessments of potential and existing vendors to identify risks in areas like data security, compliance, operational processes, and financial stability.
• Performs detailed due diligence on vendors before onboarding them. This includes reviewing their security policies, compliance certifications, financial health, and business practices.
• Continuously monitors vendors for any changes in risk profile and compliance status. Prepares and presents detailed reports on vendor risk assessments to management and relevant stakeholders.
• Stays abreast of relevant laws, regulations, and industry standards that impact vendor relationships, and ensuring vendors comply with these requirements.
• Collaborates with vendors to address identified risks, implements corrective actions, and ensures ongoing compliance with the company's standards and policies.
• Own the completion of the business and vendor review process while managing the entirety of the vendor lifecycle, which includes vendor risk classification, due diligence review, contract negotiation, ongoing monitoring, and termination.
• Complete formal written risk assessment of vendors and communicate risk assessment findings to business unit leaders, vendor owners, Legal and other pertinent stakeholders.
• Responsible for maintaining and supporting IT operations and administration assignments such as invoicing, contract documentation, scheduling, IT audit liaison, budgeting, and other requested tasks.

Qualifications

• Minimum 3-5+ years of working experience with vendor and technology risk assessment.
• Foundational understanding of information technology and security is a MUST.
• Obtained a vendor and technology risk management related certification is highly desired.
• Highly organized, dedicated, and driven mindset is a MUST.
• Well versed in financial regulatory and supervisory expectations in the risk areas.
• Demonstrated understanding of information security, business continuity/resumption, compliance, financial analysis, legal, and audit are preferred skills/knowledge are preferred knowledge requirements.
• Ability to identify problems, gather relevant information, and identify potential conclusions.
• Detail-oriented, even when faced with multiple deadlines on multiple assignments.
• Professional demeanor and effective communication skills.
• Team driven, with willingness and proven ability to work well and collaborate effectively with others.
• Above all, a desire to learn and a passion for risk management profession.

Leader Bank offers an excellent compensation and benefits package including 401k plan with corporate match, medical and dental insurance, and the opportunity to work for a fast growing, local organization.

Leader Bank, N.A. is an Equal Opportunity and Affirmative Action employer and does not discriminate on the basis of race, color, religion, age, gender, marital status, sexual orientation, national origin, disability, military status, veteran status, or any other protected class.