Join our Commercial & Investment Bank (CIB) Controls team, where you’ll help shape how we identify, govern, and manage risk from a complex third-party ecosystem. You’ll play a key role in transforming risk assessments into actionable insights that protect our clients, data, and operations.

As a Third Party Risk & Controls Insights Vice President in CIB Controls, you will drive the insights agenda across the third-party lifecycle. You’ll turn assessment and monitoring outputs into meaningful narratives, themes, and recommendations. Your work will support risk acceptance and remediation prioritization, helping us maintain a strong risk posture and safeguard our reputation. You’ll collaborate with diverse teams and use your judgment and communication skills to ensure risk conclusions are clear and actionable.

Job Responsibilities

• Compile and analyze third-party risk information, summarizing key impacts for business and Finance & Business Management (F&BM) partners.
• Produce executive governance updates and materials for CIB controls and third-party risk forums.
• Support third-party lifecycle reporting by following established standards for risk statements, residual risk language, materiality thresholds, and issue categorization.
• Perform quality checks on risk assessments and monitoring outputs; flag gaps and coordinate updates with partner teams.
• Identify recurring themes and emerging risks across the vendor portfolio and escalate items that meet defined thresholds.
• Create residual risk summaries and remediation options to support risk acceptance and prioritization discussions.
• Review and provide input on business cases for new or expanded vendor engagements, identifying opportunities to leverage existing vendors.
• Maintain and refresh tracking for key third-party risk and control metrics (KRIs/KPIs), thresholds, and trend summaries; contribute content for dashboards and routine reporting.
• Track third-party control issues through testing, monitoring, and closure, ensuring documentation and evidence meet standards.
• Coordinate with Controls, Technology, Procurement, Legal, Compliance, Operational Risk, and business stakeholders to collect inputs and support a consistent view of third-party risk posture.
  

Required Qualifications, Capabilities, and Skills

• Demonstrated expertise in control management within financial services, focusing on compliance and operational risk mitigation.
• Hands-on experience supporting third-party risk activities across the vendor lifecycle, with ability to document clear risk conclusions and support decision materials.
• Ability to summarize assessment and monitoring results into executive-ready updates, including key themes, emerging risks, and recommended next steps.
• Ability to translate technical risk topics into business-friendly language, including concise risk statements and practical mitigations.
• Strong analytical and technical literacy, including interpreting process flows, supporting KRI/KPI definition and tracking, and communicating insights.
• Effective stakeholder management skills, partnering across controls, procurement, legal, compliance, technology, and business teams.
• Strong written and verbal communication skills, including drafting governance materials and briefing leaders with clear messaging.
  

Preferred Qualifications, Capabilities, and Skills

• Experience supporting third-party risk portfolio reporting and governance routines, including maintaining taxonomies and producing management information.
• Ability to partner with analytics/automation teams to improve monitoring and insights for third-party risk and controls.
• Working knowledge of operational resilience concepts, including business service mapping, recovery expectations, and dependency analysis.
• Strong collaboration and influencing skills to reinforce standards, raise credible challenge, and support alignment on remediation priorities.
• Understanding of the CIB business context to support third-party risk discussions and align recommendations with client, regulatory, and operational expectations.