Sr. Analyst - Vendor Risk Management

Profile

u003cpu003eu003cstrongu003eABOUT LITTLERu003c/strongu003eu003c/pu003enu003cpu003eAt Littler, we understand that workplace issues canu0026rsquo;t wait. With access to more than 1,500 employment attorneys in over 80 offices around the world, our clients donu0026rsquo;t have to. We aim to go beyond best practices, creating solutions that help clients navigate a complex business world. With deep experience and resources that are local, everywhere, a diverse team of the brightest minds, and powerful proprietary technology, we deliver groundbreaking innovation that prepares employers for whatu0026rsquo;s happening today, and whatu0026rsquo;s likely to happen tomorrow. Because at Littler, weu0026rsquo;re fueled by ingenuity and inspired by you.u003c/pu003enu003cp style=u0022text-align: center;u0022u003eu003cstrongu003eSR. ANALYST-VENDOR RISK MANAGEMENTu003c/strongu003eu003c/pu003enu003cp style=u0022text-align: center;u0022u003eu003cstrongu003e(This position is not available to be performed in Colorado)u003c/strongu003eu003c/pu003enu003cpu003eu003cstrongu003eKEY ACCOUNTABILITIES:u003c/strongu003eu003c/pu003enu003cpu003eAccountable for partnering with Information Governance Risk leadership to assist in developing capabilities for managing vendor assessments, maintaining an up to date vendor catalog, performing on-going monitoring of vendors and program reporting.u0026nbsp;u003c/pu003enu003culu003enu003cliu003eVendor Assessments: Manage process for conducting risk assessments of vendors the firm is considering.u0026nbsp; Partner with leadership responsible for the business process and technical components of the vendor relationship to gather relevant information regarding how the vendor will support or supplement firm work.u0026nbsp; Conduct an information governance risk assessment (security, privacy, retention, continuity, etc.) utilizing internal resources or external vendors, based on the scope of the engagement, to determine the risk to the firm if we conduct business with the vendoru003c/liu003enu003cliu003eWork with the Information Governance Counsel to identify risk issues to be addressed by contract terms.u0026nbsp; Meet established SLAs and communication practices to keep all partners informed of the assessment process. Manage vendor relationship throughout the assessment lifecycle.u003c/liu003enu003cliu003eDocument and communicate requirements or mitigation strategies to ensure the vendor meets the firmu0026rsquo;s risk management requirements.u0026nbsp; Conduct risk assessments of active vendors based upon their risk level to ensure they continue to meet firm information governance requirements, determine if the scope of their services have changed, and if new requirements or mitigation strategies are needed to continue conducting business with the vendor.u0026nbsp; Document findings and partner with business and technical owners to ensure they understand risks to the firm and adjust our relationship with the vendor as needed.u003c/liu003enu003c/ulu003enu003cpu003eo Vendor Catalog:u0026nbsp; Assist with developing and maintaining a centralized up to date catalog of the firmu0026rsquo;s active vendors.u0026nbsp; Provide guidance on vendor categorization based on critically and services provided to the firm. Utilize catalog to help inform an overall vendor risk profile.u003c/pu003enu003cpu003eo Vendor Monitoring: Monitor and track vendor posture and risk using structured scorecards.u0026nbsp; Identify new or emerging risks for monitored vendors and work with vendor to address.u0026nbsp; Escalate high risk items to senior management as appropriate. Maintain a centralized list of vendor risks requiring remediation, along with remediation deadlines. Manage remediation of identified vendor risks throughout risk lifecycle.u003c/pu003enu003cpu003eu0026nbsp;u0026nbsp; o Program Reporting:u0026nbsp; Monitor and communicate KPIu0026rsquo;s around vendor assessments, vendor due diligence, and vendor risk.u0026nbsp; Partner with internal groups to develop dashboards and reports within the firmu0026rsquo;s tracking solutions.u0026nbsp;u0026nbsp;u003c/pu003enu003culu003enu003cliu003eResponsible for assisting with special projects as assigned.u0026nbsp;u003c/liu003enu003cliu003eMaintain up to date knowledge of industry standards and best practices related to vendor risk management.u0026nbsp;u003c/liu003enu003cliu003ePerform such other/additional duties as may from time to time be assigned.u003c/liu003enu003c/ulu003enu003cpu003eu003cstrongu003eTECHNICAL SKILLS AND COMPETENCIES REQUIRED:u003c/strongu003eu003c/pu003enu003culu003enu003cliu003eEstablished knowledge of information risk management industry standards including ISO, NIST, SOC, etc.u003c/liu003enu003cliu003eDemonstrated ability to execute multiple projects against competing timelines while maintaining quality standards.u003c/liu003enu003cliu003eDemonstrated ability to manage vendor relationships, including identification, evaluation and later management of vendors.u003c/liu003enu003cliu003eDemonstrated ability to provide a high level of customer service, which meets team service standards and user expectations.u003c/liu003enu003cliu003eDemonstrated ability to develop productive operational partnership with direct reports, peers, Client Originating Attorneys, Corporate Leaders, and key program partners such as IT and the Information Governance team.u003c/liu003enu003cliu003eExperience with Governance Risk and Compliance (GRC), issue tracking, and assessment solutions (such as Servicenow, Privaa, etc).u003c/liu003enu003c/ulu003enu003cpu003eu003cstrongu003eEDUCATION AND CERTIFICATIONS:u0026nbsp;u0026nbsp;u003c/strongu003eu003c/pu003enu003cpu003eu003cstrongu003eRequired:u003c/strongu003e Bacheloru0026rsquo;s degree with CISA, CRISC, etc.u003c/pu003enu003cpu003eu003cstrongu003eEXPERIENCE REQUIRED:u003c/strongu003eu003c/pu003enu003cpu003eu0026nbsp;5-7 years of applied work experience in the Vendor Risk and Vendor Management field.u003c/pu003e,EqualOpportunityEmployerDescription:null,PayTransparencyPolicyStatement:null,MatchScore:1.0,HasApplied:false,ApplicationJobBoardName:null,ApplicationJobBoardId:null,DateApplied:null,Salaried:true,CompensationAmount:null,PublishingStatus:1,Links:[],BehaviorCriteria:[],MotivationCriteria:[],EducationCriteria:[],LicenseAndCertificationCriteria:[],SkillCriteria:[],WorkExperienceCriteria:[],JobBoardMemberships:[{JobBoardId:2e3d7edd-7174-48cf-a542-539119bbcf9f,PublishedInternal:true,PublishedExternal:false,ExternalPostedDate:null,InternalPostedDate:2021-05-13T22:46:39.052Z},{JobBoardId:631c7b72-f9c7-4adf-9109-9967ce8334e4,PublishedInternal:true,PublishedExternal:true,ExternalPostedDate:2021-05-13T22:46:39.052Z,InternalPostedDate:2021-05-13T22:46:39.052Z}],AssessmentUri:null,AssessmentStatus:null,OpportunityIsClosed:false,TravelRequired:null,TravelDescription:null,SupervisorName:null,Assessments:[],ApplicationId:null,CompensationAnnualMinimum:null,CompensationAnnualMaximum:null,CompensationHourlyMinimum:null,CompensationHourlyMaximum:null,CompensationCurrency:null});

Company info

Sign Up Now - WashingtondcCrossing.com