- Evaluates vendor due diligence documentation, identifies material risks and control deficiencies, assesses overall risk exposure, and develops recommendations for risk mitigation and escalation.
|
- Performs vendor risk assessments, residual risk assessments, and ongoing monitoring activities in accordance with established program requirements.
|
- Requests, reviews, uploads, categorizes, and tracks vendor due diligence documentation within the risk management database; follows up with vendors and internal stakeholders to obtain required information.
|
- Analyzes trends in vendor performance, cybersecurity ratings, financial condition, audit results, and other risk indicators to identify emerging risks and recommend corrective actions.
|
- Evaluates data quality, identifies reporting discrepancies, and recommends enhancements to improve data integrity, reporting accuracy, and workflow efficiency.
|
- Prepares and distributes recurring reports, dashboards, metrics, and scorecards related to vendor management, enterprise risk management, contract management, and corporate insurance activities.
|
- Coordinates and independently manages assigned vendor onboarding activities, evaluates risk assessment results, resolves outstanding issues with business units, and recommends appropriate risk ratings.
|
- Reviews contractual provisions for risk considerations, identifies unusual terms or potential concerns, and coordinates resolution with business owners and stakeholders.
|
- Analyzes insurance claims, policy coverage, loss trends, and renewal information to identify exposures and recommend improvements to coverage or reporting practices.
|
- Collaborates with internal stakeholders including Information Security, IT, Compliance, Finance, Business Continuity, Facilities, and Internal Audit to support risk management initiatives and ensure program alignment with regulatory expectations and industry best practices.
|
- Assists with enterprise risk management activities, including gathering information, preparing risk assessments, maintaining risk inventories, and supporting risk reporting.
|
- Researches regulatory guidance, industry trends, and emerging risks and communicates relevant information to management.
|
- Facilitates cooperation with regulatory examinations, internal audits, and third-party audits by gathering documentation, responding to requests, and tracking remediation activities.
|
- Develops, updates, and maintains procedures, training materials, forms, and intranet content related to risk management programs.
|
- Participates in testing and validation activities related to risk management systems and process enhancements.
|
- Identifies systemic issues through data analysis, develops recommendations to improve operational efficiency, strengthen internal controls, and increase automation within risk management processes.
|
- Supports risk management training and awareness initiatives across the organization.
|
- Performs related duties as assigned.
|