Third Party Risk Program Analyst

Rockland Trust is seeking an experienced Third Party Risk Program Analyst.

This position will report to the Third Party Risk Program Lead within the Second Line of Defense risk management function and work closely with business units, Information Technology, Second Line risk management teams and external contacts (e.g., third parties) to independently execute and oversee third party risk management activities across the full vendor lifecycle.

This position requires strong attention to detail, sound risk judgment, and the ability to operate independently in a fast paced and regulated environment.

The Analyst will act as a risk advisor to business stakeholders, ensuring third party engagements are assessed, monitored, and documented in alignment with the Bank’s Third Party Risk Management Program and regulatory guidance.

Responsibilities


* Act as a Third Party Risk Management (TPRM) subject matter expert, providing guidance, effective challenge, and advice on third party risk requirements and best practices to stakeholders across the organization. 


* Conduct comprehensive risk assessments over new and existing third party vendors in collaboration with Engagement Managers and subject matter experts, including the determination of inherent risk, review and analysis of due diligence documentation, and evaluation of relevant operational, financial, compliance, information security and business  continuity, etc., controls.


* Perform ongoing monitoring of third party relationships to ensure continued alignment with internal policies, regulatory guidance and TPRM Program requirements.


* Conduct reviews of SOC (System and Organization Controls) reports for operational considerations, evaluating report scope, auditor opinion, subservice organizations, and identified control exceptions; identify applicable Complementary User Entity Controls (CUECs) and coordinate with Engagement Managers to ensure required controls are implemented and documented.


* Perform quality assurance (QA) reviews over Inherent Risk Questionnaires (IRQs) to validate data accuracy and appropriate risk ratings, and third party reassessments ensuring the completeness of subject matter expert reviews, effective challenge, and consistency in risk assessment results.


* Identify potential control gaps or risk concerns and escalate findings in accordance with established risk management guidelines.


* Prepare reports and dashboards summarizing third party risk exposure, assessment status, and key trends for Management and governance committees.


* Maintain accurate and complete vendor records within the Bank’s TPRM Governance, Risk and Compliance (GRC) system of record, Archer, ensuring data integrity and audit readiness.


* Support internal audits and regulatory examinations by providing requested documentation. 


* Assist in enhancing and refining third party risk processes, documentation standards, and reporting methodologies.

    ...