Apex Systems is looking for a Vendor Risk Analyst to join one of our large financial clients. This is a hybrid position in Vienna, VA. This position requires working closely with cross-functional teams, internal business stakeholders, and third-party vendors to support a highly collaborative Vendor Risk Management (VRM) program. The Analyst will assist with conducting risk assessments, ongoing monitoring, due diligence, business continuity and documentation for both new and existing vendors. You will also play a critical role in process improvement, gap identification, and issues management while building strong relationships to manage third-party risks across the third-party lifecycle.

Job Responsibilities

• Maintain an up-to-date inventory of third-party vendors and engagements, ensuring adherence to VRM policies and procedures.

• Conduct or assist with comprehensive risk assessments for both new and current vendors, evaluating potential risks related to security, compliance, and operational effectiveness.

• Partner with internal POC’s and vendors to ensure timely completion and return of due diligence items.

• Build and maintain effective, collaborative relationships with internal stakeholders and third-party vendors to align on risk management objectives and best practices.

• Assist with incident response efforts by coordinating with impacted vendors to ensure effective resolution.

• Work with Procurement to manage vendor onboarding and offboarding processes, including contract reviews and service level adherence.

• Monitor key performance indicators (KPIs) and key risk indicators (KRIs) to track vendor performance and ensure compliance with service level agreements (SLAs).

• Identify gaps in processes, develop improvement strategies, and implement risk mitigation measures.

• Provide regular updates, reports, and metrics on Vendor Risk Management operations to internal stakeholders.

• Collaborate with Legal, Compliance, IT, and Procurement teams to address third-party risk issues, develop solutions, and maintain business continuity.

• Conduct ongoing monitoring of vendor performance, financial health, and adverse media content to ensure continued adherence to VRM standards.

• Stay informed about emerging trends, threats, and regulatory requirements in third-party risk management to maintain a proactive approach.

• Support process improvement initiatives by identifying areas for optimization within vendor risk assessment and monitoring procedures.

Qualifications

• 5-7 years of experience in a non-technical vendor risk management role.

• Strong written communication skills with the ability to produce clear risk assessments, documentation, reports, and metrics.

• Proven experience conducting risk assessments and implementing risk mitigation strategies for third-party vendors.

• Strong planning, organizational, and collaboration skills, with the ability to work effectively as a team player across technical and non-technical teams.

• Experience in gap identification, process improvement, and issues management within vendor management workflows.

• Hands-on experience with continuous monitoring of vendor performance and adherence with service level agreements (SLAs).

• Bachelor’s degree in business administration, finance, or a related field with a focus on risk management (or equivalent experience).

Desired Qualifications

• VRM certifications such as CTPRP, CTPRA, NCCO, or CRCM are highly preferred.

• Experience with third-party risk management (TPRM) platforms is a plus.

• Knowledge of mortgage lending and servicing compliance and practices is a plus.