Vendor Management Risk Analyst

Toast is a rapidly growing startup building the first all-in-one restaurant management software platform. Toast’s Android tablet-based system helps restaurants operate more efficiently and connect with their customer base in new and innovative ways. We’re growing fast and have a customer base of cafes, restaurants, bars and nightclubs across the country. We work hard and care about our customers’ success and we have a lot of fun doing it. As a startup, we move fast and have a lot of opportunities for career growth, so if you’re passionate about your work and want to be in a fun and growing industry, join us! You will be helping Toast to grow our business across the US and internationally.

Responsibilities:

We are seeking a detail-oriented and experienced Vendor Management Risk Analyst in the Procurement space who will assist in the assessment and monitoring of risks associated with third-party vendors. This person will facilitate risk classification, the due diligence process and promote overall regulation compliance. Additionally, this person will provide support to vendor relationship owners, as needed.

The ideal candidate will have a strong background in procurement systems, vendor relationship management, and adherence to company policies and regulations.

Vendor Compliance and Risk Management:

• Identify, assess, and monitor risks across the vendor lifecycle, including onboarding, ongoing compliance, and offboarding.
• Use vendor risk management frameworks to ensure compliance with SOC2 Type 2 and other relevant regulatory standards.
• Conduct vendor audits and performance evaluations to mitigate risks and identify areas of improvement.
• Develop and enforce policies and procedures for vendor selection, monitoring, and termination.
• Ensure all vendor activities are aligned with regulatory, legal, and organizational requirements.
• Conduct due diligence and risk assessments, including financial, operational, and cybersecurity risks.
• Recommend mitigation strategies and ensure corrective actions are tracked and implemented.

Cross-Functional Collaboration

• Work with IT, finance, and legal teams to address vendor-related risks, including data security, confidentiality, and contract compliance.
• Provide training and guidance to internal stakeholders on vendor risk management practices.

Vendor Onboarding Process

• Manage the vendor onboarding lifecycle, including collecting, reviewing, and verifying vendor documentation and information.
• Ensure all vendors meet company requirements for legal, financial, and operational compliance.
• Set up new vendors in the procurement system, ensuring data accuracy and completeness.
• Act as the primary point of contact for vendors during the onboarding process, addressing questions and concerns promptly.

Requirements

• Bachelor's degree required
• 8+ years of procurement operational, sourcing or supply chain experience
• Well-developed problem solving and analytical skills
• Familiarity with compliance standards such as SOC2, ISO 27001, or other relevant frameworks.
• Experience in vendor risk management or procurement operations
• Excellent time management and organizational skills
• High level of attention to detail
• Strong written, verbal communications and presentation skills
• Proficient in the Microsoft Office Suite
• Experience with Workday/Oracle/SAP/Netsuite or any ERP system
• Flexible to work in shifts, including US shifts