Vendor Risk Management Analyst

New York, NY (Hybrid) Salary Range: $120,000 - $140,000

The Assistant Vice President, Vendor Risk Management Analyst is responsible for executing and enhancing Apple Bank’s Vendor Risk Management Program and supporting the effective management of vendor relationships throughout the vendor lifecycle. The position independently identifies, assesses, monitors, reports, and facilitates the mitigation of vendor-related risks.

Working closely with business stakeholders and vendors, the Analyst supports risk management activities, vendor performance oversight, issue remediation, and initiatives involving new and existing service providers.

The position uses independent judgment to evaluate vendor risks, challenge the adequacy of due diligence and ongoing monitoring, escalate material concerns, and recommend appropriate risk treatment. This includes strengthening the Bank’s vendor risk framework, policies, procedures, systems, governance reporting, training, and regulatory readiness.

ESSENTIAL DUTIES & RESPONSIBILITIES

Execute, maintain, and enhance the Bank’s vendor performance and risk management strategies and framework.

Develop, maintain, and enhance vendor risk management policies, procedures, standards, and processes to support the Bank’s strategic objectives.

Manage the intake and risk-tiering of new and existing vendor relationships through the vendor management system, ensuring required documentation, approvals, and risk assessments are completed in accordance with established requirements.

Perform credible challenge of incomplete or insufficient due diligence, monitoring, risk acceptances, remediation plans, and supporting evidence; document conclusions and escalate material exposures, exceptions, and overdue actions.

Coordinate with business owners, subject-matter experts, control functions, and vendors to gather and analyze vendor-related information, resolve identified issues, and implement appropriate risk mitigation and remediation plans.

Administer and maintain the vendor management system, including accurate vendor records, relationship ownership, risk classifications, contracts, due diligence documentation, issues, and supporting evidence.

Analyze vendor risk factors based on risk classifications, including subcontractors with access to customer information, and ensure business owners appropriately monitor, assess, and mitigate risks related to regulatory compliance, legal, transactional, financial, reputational, operational, business continuity/disaster recovery, and information security exposures.

Monitor vendor performance against contractual requirements and service level agreements (SLAs), identifying, measuring, and reporting performance issues on a proactive basis.

Prepare accurate and timely standard and ad hoc reports for senior management, governance committees, Internal Audit, external auditors, and regulatory inquiries.

Contribute to vendor risk training, awareness, program documentation, and initiatives designed to strengthen business-owner accountability and regulatory readiness.

Perform other duties and responsibilities as assigned in support of the Risk Management Division and the Bank’s strategic objectives.

SKILLS, EDUCATION, & EXPERIENCE

Bachelor’s degree required.

5+ years of experience in vendor risk management.

Strong organizational and administrative skills.

Demonstrated attention to detail and documentation discipline.

Experience evaluating vendor risks across operational, regulatory compliance, financial, cybersecurity, data privacy, business continuity, reputational, and fourth-party risk domains.

Experience supporting audits, compliance reviews, vendor governance or operational oversight activities.

Excellent analytical and problem-solving skills.

Excellent interpersonal and communication (verbal + written) skills.

Proven ability to collaborate with all levels of the organization from individual contributor to executive management.

Must be able to work independently as well as within a team environment.

Proven ability to work well under pressure on multiple projects and to meet deadlines.

Proficiency in Microsoft Office Suite applications, including Excel, PowerPoint, Word, and Copilot; experience with Power BI and Visio preferred.

Experience leveraging artificial intelligence (AI) and emerging technologies to support risk analysis, vendor due diligence, monitoring, reporting, process efficiency, and other third-party risk management activities is preferred.

Relevant professional certification, such as CTPRP, CTPRA, CRISC, CISA, CISM, or a comparable risk-management designation, is preferred.

Visa sponsorship not available.

We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, military and/or veteran status, or any other Federal or State legally-protected classes.