• Identify industry-accepted best practices/firm-established processes and provide guidance and assistance to all stakeholders to direct and implement third party risk compliance planning, execution, and control.
• Articulate information security, privacy, and compliance type risks to business stakeholders.
• Understand the risks posed by the type of third parties.
• Stay knowledgeable of the risk management regulatory environment.
• Partner with Procurement, IS Strategic Vendor Management, Information Security, Privacy, Information Systems, and Full Time/Permanents teams.
• Identify, categorize, and evaluate global third parties into risk ranked groupings.
• Evaluate third-party risk program against industry best practices.
• Develop a third party risk team to a better understanding of third party risks and potential impacts to the organization.
• Maintain risk classifications and perform third-party due diligence based on classification.
•...