Senior Director, Third-Party Risk
Core
Lead enterprise third-party risk oversight, focusing on cyber, technology, and dependency risks for vendor-provided services, external platforms (cloud, SaaS, AI), and critical dependencies.
Role type
Senior Director, Second-Line Risk & Resilience
Builds
Enterprise third-party risk framework, governance models, and executive risk reporting
Domain
Financial Services / Third-Party Risk Management (TPRM)
Deliverable
dashboards & analysis
Required skills
Third-party risk leadership, cyber risk assessment, regulatory compliance (DORA, IOSCO), GRC platforms, continuous vendor monitoring, risk appetite/KRIs, executive reporting, AI tool usage
Preferred skills
CISSP, CISM, CRISC certifications
Responsibilities
Operationalize enterprise third-party risk framework and tiering; Provide senior oversight on material third-party cyber and technology risks; Lead second-line oversight of risks from external dependencies; Partner with TPRM to integrate risk requirements into decision-making; Provide challenge and guidance on risk remediation and acceptances; Improve executive visibility via dependency mapping and concentration analysis; Drive continuous improvement of risk methodologies.
Seniority
Senior Director, Strategy & Mentorship
