Third Party Management Risk Lead

Position:  Sr Risk Specialist

Salary Range: $65,000 - $80,000 depending on experience, including full-time benefits

Location: Remote

JOB SUMMARY:  The New American Funding (“NAF”) Third Party Risk Management (TPRM) team is responsible for the governance and oversight of NAF’s third-party risk and for assessing the effectiveness of controls used to identify, monitor, and manage third-party risk throughout the third-party lifecycle.

The Senior Risk Specialist – Third Party Management will report to the TPRM Risk Lead and play a key role in supporting, enhancing, and maturing the TPRM Program. This role incorporates select leadership and program-development responsibilities while remaining hands-on in execution. The Senior Risk Specialist will support risk assessments, due diligence activities (DDA), ongoing monitoring activities (OMA), and issue management across the full third-party lifecycle.

This individual must be a strong communicator and multitasker who understands that different risk domains require tailored, risk-based management approaches to be effective. The role requires close collaboration with vendors, internal business partners, and fellow risk professionals to ensure a consistent, unified, and practical approach to third-party risk.

• Support all stages of the third-party lifecycle, including vendor intake, onboarding, inherent risk assessments, due diligence, ongoing monitoring, issue remediation, and offboarding
• Assist in the implementation, enhancement, and ongoing administration of TPRM tools, workflows, and risk management platforms
• Provide risk-based guidance to business units to support informed vendor selection and engagement decisions
• Assist in the enhancement and maintenance of TPRM policies, procedures, standards, and governance documentation
• Partner with other risk managers to support the development and use of a consistent risk taxonomy across risk domains
• Contribute to the development and implementation of contract compliance and oversight activities
• Assist in the development of dashboards, metrics, and reporting to support leadership, audit, and regulatory needs
• Support program automation and process improvements to increase efficiency while maintaining strong risk oversight
• Track and manage DDA, OMA, findings, and action plans through ticketing systems and risk management platforms
• Conduct analysis to identify single-source dependencies, concentration risk, and vendor criticality
• Build and maintain strong relationships with vendors and internal business partners to support timely issue resolution
• Serve as a subject matter resource to junior risk specialists and support knowledge sharing across the team
• Support audits, exams, and internal reviews related to third-party risk management

• College degree preferred
• 4+ years of experience in Third Party Risk Management, Vendor Management, or Risk Management within a regulated financial services or mortgage environment
• Strong understanding of the full third-party lifecycle and regulatory expectations related to third-party risk
• Working knowledge of eGRC and third-party risk management platforms
• Experience with ticketing systems and workflow-based risk tools
• Knowledge of key risk domains including, but not limited to: AML, Business Continuity, Compliance, Cyber Security, Financial, Human Resources, Privacy, Reputational, SSAE/SOC reporting, and Technology Risk
• Demonstrated ability to apply risk-based judgment, recognizing that not all risk domains require the same management approach
• Strong experience with ongoing monitoring activities, including oversight meetings, issue tracking, and exit strategies
• Excellent written and verbal communication skills, with the ability to communicate effectively across technical and non-technical audiences
• Strong organizational skills with attention to detail and adherence to deadlines
• Proficient in Microsoft 365 (Outlook, Excel, Word, PowerPoint, Teams)
• Ability to work independently while also being a strong team player
• Proven ability to manage multiple priorities in a fast-paced environment

Other Duties: This job may require frequent sitting or standing for long periods of time. This job profile is not intended to be an all-inclusive list of job duties and responsibilities, as one may perform additional related duties as assigned in order to meet the needs of the organization.

Work Authorization: Must be able to verify identity and employment eligibility to work in the U.S.

Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.  Must be able to lift up to ten pounds.  Primary functions require sufficient physical ability and mobility to work in an office setting; to stand or sit for prolonged periods of time; to occasionally stoop, bend, kneel, crouch, reach, and twist; to lift, carry, push, and/or pull light to moderate amounts of weight; to operate office equipment requiring repetitive hand movement and fine coordination including use of a keyboard; and to verbally communicate to exchange information.  VISION:  See in the normal visual range with or without correction.  HEARING:  Hear in the normal audio range with or without correction.

[EOE/M/F/D/V. Drug-free workplace.]

#LI-JS3

#LI-REMOTE