Director of Service Provider Oversight

Role Overview

• Own the Risk Lifecycle: You will take direct accountability for identifying, assessing, and mitigating risks across the entire vendor lifecycle, ensuring that the bank’s "boots on the ground" oversight is as rigorous as its internal controls.
• Execute High-Stakes Due Diligence: Lead the operational execution of pre-contract due diligence. You won't just review checklists; you will critically evaluate a provider’s financial health, operational resilience, and cybersecurity posture to ensure they are fit for the bank’s requirements.
• Drive Contractual Integrity: Partner with Legal and Procurement to negotiate and enforce robust Service Level Agreements (SLAs) and Key Performance Indicators (KPIs). You will ensure that "Right to Audit" and "Step-in Rights" are not just clauses, but actionable tools.
• Monitor Performance in Real-Time: Establish and manage a continuous monitoring program. You will analyze performance data and SOC reports to proactively identify "weak signals" of vendor distress or non-compliance before they escalate into systemic issues.
• Manage Incidents and Remediation: Act as the primary escalation point for third-party service disruptions or data breaches. You will lead the operational response, ensuring swift remediation and transparent communication to the Second Line (Risk/Compliance) and senior leadership.
• Bridge the Gap Between Business and Risk: Collaborate directly with internal business unit leaders to help them achieve their strategic goals through third parties while maintaining a disciplined risk posture.
• Ensure Regulatory Readiness: Maintain an "always-audit-ready" environment. You will be the primary point of contact for operational queries during regulatory examinations, demonstrating exactly how the bank manages its third-party exposures on a daily basis.

Requirements

• Education: Bachelor’s degree in Business Administration, Finance, Risk Management, or a related field.
• Experience: At least 10 years of experience in the financial services industry, with a minimum of 5 years specifically in Third-Party Risk Management (TPRM), Vendor Management, or Operational Risk within a bank.
• Regulatory Knowledge: Deep, working knowledge of banking regulations and guidance regarding third-party oversight and vendor management
• 1LoD Expertise: Proven experience operating within a First Line of Defense capacity, with a track record of owning risk and executing operational controls rather than just performing oversight or audit functions.
• Analytical Skills: Strong ability to interpret complex data, financial statements, and SOC 1/SOC 2 reports to assess the viability and security of service providers.
• Leadership: Demonstrated experience leading teams and influencing cross-functional stakeholders in a high-pressure, regulated environment.

Tech Stack

• Cyber Security
• Swift

Benefits

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time