Third Party Vendor Risk Management, Director

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Summary:

The Third-Party Vendor Management (TPVM) Executive is responsible for the deployment, maintenance and continuous improvement of the TPVM Program and will participate in the governance of the vendor risk management program for the Bank, working in tandem with the Bank’s Vendor Risk Management (VRM) Office. The TPVM Executive will manage staff and teams to standardize processes and ensure execution of end-to-end high-performing capabilities for risk identification, assessment, measurement, mitigation, aggregation and reporting. The TPVM Executive will be responsible for the ongoing development and deployment of the policies, procedures and tools required to effectively manage and oversee the TPVM Program. Responsibilities include ensuring that the review, controls and testing cycles are appropriately deployed and monitored within the first line of defense (i.e. the line of business or corporate function that engages and manages the vendor relationship) and that timely and candid vendor performance feedback during the review process, including collaboration of development plans, is completed. In addition, the TPVM Executive will sponsor developmental opportunities, including onthe-job training and continuing education for professional staff to continually strengthen their skill set. The TPVM Executive will serve as the third party Subject Matter Expert (SME) on matters relating to third party regulatory guidance and risk management/mitigation. The TPVM Executive will interpret and apply the most current guidance, regulations, best practices and vendor risk trends commensurate with the Bank’s appetite for risk. In addition, the executive will support and regularly interact with Internal Audit and Bank regulators.

• Oversee a rigorous schedule of vendor assessments (including ownership of initial drafts, in partnership with contract managers) and ensure a summary opinion regarding the nature of vendor performance is rendered and supported, along with the identification of any critical vendor risk issues

• Oversee third party vendor management practices, provide interpretation and counsel on policies and challenge existing practices as necessary

• Monitor new developments and regulatory guidance in vendor management processes and implement program improvement as necessary

• Independently prepare and analyze third party risk reporting and program exceptions for senior management in order to monitor the level of residual risk to the organization

• Direct continuous improvement, development and redeployment of the policies, procedures and tools required to effectively manage third party vendor risk within the first line of defense

• Provide functional leadership within the organization for third party vendor management

• Formulate materials for audit/regulatory updates, as requested, which accurately reflect the status of TPVM Program

• Lead activities regarding third party existing/emerging products, processes and/or transformational initiatives; ensure that third party related risks are identified and accounted for

• Prepare reports, materials and assessments for internal audit and regulatory exams, third party reviews, Bank committee meetings, and the Board of Directors, as necessary

• Ensure the vendor risk profile is validated or updated at the conclusion of each assessment—or on a more frequent basis for higher risk third parties

• Identify engagement risks and ensure appropriate remediation plans are developed

• Ensure risk reviews are completed and verify that the required governance, policies, processes and controls are in place at third party locations and are consistent with the terms of written agreements, where required

• Serve as thi