Third Party Risk Manager

At VCCU, we are proud of the work we do to improve the financial well-being of our members and our community.

If you seek meaningful work building stronger financial futures and aspire to create a positive difference in your community, wed love to hear from you! About The Role The Third Party Risk Manager is responsible for administering and continuously enhancing Ventura County Credit Unions Third Party Risk Management and Vendor Management Program.

This position provides centralized oversight of third-party relationships throughout the vendor lifecycle, with primary responsibility for vendor onboarding and termination, vendor due diligence, vendor risk assessments, risk classification, ongoing monitoring, issue remediation oversight, and vendor risk reporting.

Working in partnership with Vendor Owners and subject-matter experts across VCCU, the Third Party Risk Manager evaluates third-party risks and provides effective risk oversight and challenge to ensure vendor owners manage relationships consistent with VCCUs risk appetite, policies, regulatory requirements, and business objectives.

This is a key member of the Enterprise Risk team and requires onsite work at VCCUs Ventura Headquarters.

What Youll Do Third Party Risk Management: Administration and oversight of VCCUs Third Party Risk Management framework, including enhancements to policies, procedures, risk methodologies, questionnaires, workflows, documentation standards, and the administration of the centralized vendor management system.Vendor Risk Assessments: Lead and facilitate risk assessments for new and existing third-party relationships, evaluating applicable operational, financial, information security, cybersecurity, compliance, regulatory, strategic, reputation, resilience, concentration, and third- and fourth-party risks.Vendor Due Diligence: Coordinate and perform risk-based due diligence appropriate to each vendors services, criticality, information access, operational dependency, and assigned risk classification.

Review applicable financial, security, compliance, insurance, business continuity, control, and other supporting documentation.Risk Classification & Onboarding: Evaluate new vendor relationships, assign or recommend appropriate risk classifications, determine required due diligence, and verify completion of applicable risk requirements prior to onboarding.Ongoing Monitoring: Establish and coordinate risk-based periodic vendor reviews; monitor completion of due diligence, risk assessments, certifications, documentation, and remediation activities; and reassess vendor risk when material changes occur.Issue Management: Identify and document vendor control gaps, documentation deficiencies, exceptions, and risks; coordinate with Vendor Owners and stakeholders to establish corrective action plans; monitor remediation progress; and escalate significant or unresolved risks in accordance with VCCU's established procedures..Contract Risk Review: Review third-party contracts ...