Risk Manager
Core
Own the end-to-end third-party risk program for a Buy Now, Pay Later (BNPL) ecosystem, ensuring vendor failures do not result in customer checkout failures or regulatory breaches.
Role type
Senior Vendor Risk Manager
Builds
A resilient vendor risk program covering KYC, identity verification, fraud detection, credit bureau, payment processing, card issuing, banking, and collections partners.
Domain
Fintech / BNPL / Payments
Deliverable
client delivery
Required skills
Third-party risk management, vendor due diligence, risk rating, contract negotiation, regulatory compliance (GDPR/CCPA/PCI-DSS), concentration risk analysis, subprocessor mapping, adverse media monitoring, GRC platform usage.
Preferred skills
BNPL or consumer credit experience, GRC platform experience (OneTrust, ProcessUnity, Archer), CTPRP/CRISC/CISA/CISM certification.
Technologies
OneTrust, ProcessUnity, Archer, SIG, CAIQ
Responsibilities
Run due diligence on new vendors including financial health checks and security reviews; issue risk ratings with conditions; sit in contracting to secure audit rights and SLAs; own ongoing risk assessments and tiered monitoring cadences; manage vendor offboarding and data deletion; prepare risk reporting for the Risk Committee and Board.
Seniority
Mid-Senior, hands-on IC