Third-Party Risk Advisory Vice President

Help strengthen third-party risk practices through clear advisory guidance, effective governance, and actionable reporting. You will partner closely with business and functional stakeholders to identify control gaps, drive timely supplier actions, and support sustained control effectiveness. In this role, you will influence outcomes through thoughtful challenge, practical solutions, and strong stakeholder management. You will also help evolve our advisory approach and supporting framework as our risk landscape changes.
As a Third-Party Risk Advisory Vice President (Vice President) within Corporate Third-Party Oversight Risk Management, you will serve as a key risk advisor to business and functional stakeholders and act as a primary point of contact for third-party risk observations, issue identification, and advisory guidance. You will lead discussions with business owners, governance forums, and control partners to drive timely supplier actions and sustain control effectiveness. You will deliver executive-ready updates for Operational Risk leadership and senior stakeholders, while helping shape and mature the advisory approach and supporting framework.
Our team provides independent risk oversight and advisory support for third-party relationships, with a focus on identifying control gaps, improving risk transparency, and enabling effective remediation. You will work across multiple stakeholder groups to ensure third-party risk decisions are well-governed, well-documented, and outcome-oriented. You will help reinforce strong, sustainable practices that support operational resilience and responsible third-party management.
Job responsibilities
Advise business and functional stakeholders on third-party and outsourcing risk requirements, expectations, and governance processes
Assess third-party risk observations, including control gaps and residual risk, and recommend practical mitigation actions
Challenge and strengthen third-party operational resilience practices, including exit planning, to support measurable and actionable outcomes
Define and maintain advisory guidance and governance expectations for supplier artificial intelligence (AI) usage to support continuity and compliant adoption
Lead risk decision forums by framing trade-offs, documenting decisions, and driving follow-through on agreed actions and commitments
Partner with control, compliance, and risk stakeholders to align remediation plans to program expectations and control objectives
Identify process and control improvements that increase transparency, efficiency, and sustained risk reduction across third-party oversight activities
Prepare executive-ready reporting for Operational Risk leadership and senior stakeholders, translating observations into clear updates and actions
Monitor progress against remediation actions and escalate risks, delays, or blockers through appropriate governance channels
Contribute to the ongoing maturation of the third-party risk advisory approach, including standards, playbooks, and stakeholder engagement practices
Required qualifications, capabilities, and skills
Bachelor’s degree or equivalent practical experience
Minimum 5 years of experience in third-party risk management, operational risk, audit, compliance, oversight and controls, or technology risk
Experience assessing control design and operating effectiveness, including identifying gaps and articulating residual risk
Experience partnering with business stakeholders to drive timely remediation and measurable outcomes
Ability to produce clear, executive-ready written and verbal updates for senior stakeholders
Strong organization and prioritization skills, with the ability to manage multiple deliverables in a dynamic environment
Demonstrated ability to operate independently, apply sound judgment, and escalate issues appropriately
Proficiency with Microsoft Excel, PowerPoint, and Word, and collaboration tools such as SharePoint
Preferred qualifications, capabilities, and skills
Experience working with procurement, legal, compliance, technology, information security, or other control functions supporting third-party risk
Familiarity with third-party governance models, risk decision forums, and issue management practices
Experience with operational resilience topics, including supplier resiliency and exit planning
Exposure to evaluating third-party use of AI, including governance, risk controls, and continuity considerations
Professional certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), or similar