Third Party Risk Auditor

Location: Remote but requires travel to client site

We are seeking 3 highly motivated and experienced Onsite Third-Party Risk Management (TPRM) Auditors to perform audits on an as needed basis. This is not a full time or consistent 40 hour per week position.
Estimated number of audits per year is around 5 to 10, each one lasting 1 to 2 weeks. This is a remote position but travel to 3rd Party vendor sites is required.

In this role, you will be responsible for assessing and mitigating risks associated with our client's third-party vendors and suppliers. You will work closely with various stakeholders across the client organization to ensure compliance with their TPRM program and industry best practices.

Responsibilities:

• Conduct comprehensive risk assessment audits of new and existing third-party vendors, including operational, security, and compliance assessments.
• Develop and implement risk mitigation strategies for identified risks, including contractual provisions, monitoring activities, and corrective actions.
• Review and analyze third-party contracts to ensure alignment with our clients risk management policies and procedures.
• Perform on-site audits and due diligence visits at critical third-party locations.
• Maintain and update risk profiles for all third-parties in our vendor management system.
• Stay up-to-date on evolving regulations and industry standards related to TPRM.
• Collaborate with cross-functional teams such as procurement, legal, and IT to implement and maintain effective TPRM controls.
• Prepare reports and presentations summarizing risk assessments and mitigation strategies for management review.

Qualifications:

• Bachelor's degree in Accounting, Finance, Risk Management, IT Security or a related field.
• Minimum of 10 years of experience in third-party risk management, internal audit, or a related field.
• Certified Internal Auditor (CIA), Certified Third Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA), or equivalent certification preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills, with the ability to build relationships with stakeholders across the organization.
• Proficient in Microsoft Office Suite and risk management software (e.g., Archer, RSA Archer, OneTrust).
• Ability to travel as needed.