Corporate Senior Third-Party Risk Analyst

at Glacier Bancorp, Inc. in Coeur D Alene, Idaho, United States

Glacier Bancorp, Inc. (GBCI) is a regional bank holding company providing commercial banking services in 80 communities through 129 banking offices in Montana, Idaho, Colorado, Utah, Washington and Wyoming. GBCI offers an extensive benefits package that includes, but is not limited to, medical, dental, vision, life insurance; retirement plan including employer match and profit sharing; paid vacation, holiday and sick leave. Salary is negotiable depending upon relevant experience.About The Role

Summary:
The Senior Third-Party Risk Analyst will report to the Corporate Third-Party Risk Manager, who is responsible for the Third-Party Risk Management (TPRM) program. The individual in this role will take a lead position and utilize critical thinking, problem-solving, analytical, and organizational skills to manage and enhance the current TPRM program. The individual will collaborate with other Third-Party Risk Analysts and provide thought leadership for all aspects of the TPRM process, including assisting with program governance, compliance with applicable laws and regulations, and the design and implementation of enhancements to the program. This position will also play a significant role in managing and coordinating all aspects of the third-party life cycle, including planning, ongoing monitoring, due diligence, and off-boarding.
The Senior Third-Party Risk Analyst will help ensure that third-party relationships are accurately risk-rated and documented in the bank's third-party risk management system. The role also entails providing direction and supervision for the contract process, including reviewing required contract provisions and information security controls, effective challenge, execution, and contract management
The position is part of our Enterprise Risk Management team, which assists senior management and the board of directors in assessing, identifying, mitigating, and monitoring the corporation's key risks protecting the long-term safety and soundness of the company. The department is fast-paced and always evolving which requires the incumbent to maintain focus and productivity amidst competing priorities.
This is a Corporate position which may be located at an available bank division location across our eight-state footprint in AZ, CO, ID, MT, NV, UT, WA, or WY. The mid-rate for this position is $90,285.74 + / per year. (calculated for Spokane, WA).
All compensation offers are analyzed individually and take into consideration multiple factors including but not limited to geographic location, years of experience, and educational background.
Description:
* Develop and implement enhancements to the overall TPRM Program, including updates to policies and procedures, utilizing the third-party risk management system for all phases of the third- party life cycle and ensuring compliance with applicable third-party regulations and current cyber-risk mitigation strategies. Lead program improvements to outline which third parties have access to our sensitive customer, employee, and bank information along with third- party access to our systems. Active participation in the development, maturation, and maintenance of the TPRM Program, including the TPRM policy, risk appetite, and related metrics. Implement improvements to the overall third-party risk management program, including program governance, policies, procedures, templates, technology, training, and communication.
* Provide Program guidance for risk-based due diligence reviews that measure, monitor, and mitigate the risks associated with ongoing third-party and fourth-party relationships. Utilize the bank's risk profile framework to assess the inherent risk of third parties and accurately risk-rate the third parties, paying particular attention to third-party risks such as operational, information security, cyber and compliance risk. Utilize software to capture, categorize and risk score vendors. Partner with Third Party Relationship Owners to facilitate the fulfillment of due diligence requirements. Review, analyze and effectively challenge provided due diligence information. Develop risk acceptance and issues escalation process including conducting training, ongoing monitoring, and tracking. Common review areas include disaster recovery and business continuity program, insurance protection, internal control reports (SSAE 18, SOC reports), service level agreements (SLA), and third-party financial performance. Escalate material issues and risks to third-party risk and enterprise risk management, and the appropriate corporate stakeholders, as necessary.
* Manage the contract review process with business units and division staff to ensure contract language appropriately protects the bank's interest, reduces operational, legal and financial risk, and that required contract language is included and adhered to by both... For full info follow application link.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.