Third-Party Risk Advisory Vice President

Help strengthen third-party risk practices through clear advisory guidance, effective governance, and actionable reporting. You will partner closely with business and functional stakeholders to identify control gaps, drive timely supplier actions, and support sustained control effectiveness. In this role, you will influence outcomes through thoughtful challenge, practical solutions, and strong stakeholder management. You will also help evolve our advisory approach and supporting framework as our risk landscape changes.

As a Third-Party Risk Advisory Vice President (Vice President) within Corporate Third-Party Oversight Risk Management, you will serve as a key risk advisor to business and functional stakeholders and act as a primary point of contact for third-party risk observations, issue identification, and advisory guidance. You will lead discussions with business owners, governance forums, and control partners to drive timely supplier actions and sustain control effectiveness. You will deliver executive-ready updates for Operational Risk leadership and senior stakeholders, while helping shape and mature the advisory approach and supporting framework.

Our team provides independent risk oversight and advisory support for third-party relationships, with a focus on identifying control gaps, improving risk transparency, and enabling effective remediation. You will work across multiple stakeholder groups to ensure third-party risk decisions are well-governed, well-documented, and outcome-oriented. You will help reinforce strong, sustainable practices that support operational resilience and responsible third-party management.

Job responsibilities

• Advise business and functional stakeholders on third-party and outsourcing risk requirements, expectations, and governance processes
• Assess third-party risk observations, including control gaps and residual risk, and recommend practical mitigation actions
• Challenge and strengthen third-party operational resilience practices, including exit planning, to support measurable and actionable outcomes
• Define and maintain advisory guidance and governance expectations for supplier artificial intelligence (AI) usage to support continuity and compliant adoption
• Lead risk decision forums by framing trade-offs, documenting decisions, and driving follow-through on agreed actions and commitments
• Partner with control, compliance, and risk stakeholders to align remediation plans to program expectations and control objectives
• Identify process and control improvements that increase transparency, efficiency, and sustained risk reduction across third-party oversight activities
• Prepare executive-ready reporting for Operational Risk leadership and senior stakeholders, translating observations into clear updates and actions
• Monitor progress against remediation actions and escalate risks, delays, or blockers through appropriate governance channels
• Contribute to the ongoing maturation of the third-party risk advisory approach, including standards, playbooks, and stakeholder engagement practices

Required qualifications, capabilities, and skills

• Bachelor’s degree or equivalent practical experience
• Minimum 5  years of experience in third-party risk management, operational risk, audit, compliance, oversight and controls, or technology risk
• Experience assessing control design and operating effectiveness, including identifying gaps and articulating residual risk
• Experience partnering with business stakeholders to drive timely remediation and measurable outcomes
• Ability to produce clear, executive-ready written and verbal updates for senior stakeholders
• Strong organization and prioritization skills, with the ability to manage multiple deliverables in a dynamic environment
• Demonstrated ability to operate independently, apply sound judgment, and escalate issues appropriately
• Proficiency with Microsoft Excel, PowerPoint, and Word, and collaboration tools such as SharePoint

Preferred qualifications, capabilities, and skills

• Experience working with procurement, legal, compliance, technology, information security, or other control functions supporting third-party risk
• Familiarity with third-party governance models, risk decision forums, and issue management practices
• Experience with operational resilience topics, including supplier resiliency and exit planning
• Exposure to evaluating third-party use of AI, including governance, risk controls, and continuity considerations
• Professional certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), or similar