Service Center

CSCS TX

Position Summary

Candidates for the Senior Risk Specialist role plays a critical part in the organization by evaluating and mitigating risks associated with third-party vendors and suppliers. In today’s interconnected business environment, companies rely on a network of external partners for products, services, and expertise. This reliance brings opportunities but also introduces complex risks—ranging from operational disruptions and data breaches to regulatory non-compliance and reputational damage. The Senior Risk Specialist is tasked with ensuring that vendors meet established standards and that risks are identified, assessed, and controlled effectively.

Essential Duties

• Vendor Risk Assessment: Conduct thorough risk evaluations of prospective and current vendors, analyzing areas such as financial health, data security, compliance posture, and operational resilience.

• Ongoing Monitoring: Establish protocols for continuous monitoring of vendors, track performance metrics, contractual compliance, and changes in risk profile.

• Reporting: Document findings in clear, actionable reports for management and other stakeholders, providing recommendations for risk mitigation.

• Policy Development: Help create and update vendor risk management policies and procedures, ensuring alignment with organizational goals and regulatory requirements.

• Collaboration: Work with procurement, legal, IT, and compliance teams to coordinate risk management efforts and share critical information.

• Incident Management: Support vendor-related incidents, including breaches, service failures, or compliance issues, and participate in investigations and remediation planning.

Knowledge, Skills and Abilities

• Business Continuity Planning: Knowledge of vendor business continuity and disaster recovery planning requirements.

• Regulatory Compliance: In-depth understanding of relevant regulatory requirements and the ability to assess vendor compliance.

• Contract Review: Understanding of the key elements of vendor contracts, including indemnification clauses, SLAs, data protection addendums, and termination provisions.

• Analytical Skills: Ability to analyze and synthesize large volumes of information, identify trends, and draw actionable conclusions.

• Risk Assessment Techniques: Knowledge of qualitative and quantitative risk assessment methodologies, including inherent and residual risk analysis, risk scoring, and risk mapping.

• Technical Proficiency: Familiarity with risk management software, vendor management platforms, and data analytics tools.

Education and Experience

• Bachelor’s degree in finance, Risk Management, Information Technology, or a related field preferred

• Relevant Work Experience: Minimum of 3-5 years' experience in risk assessment, vendor management, compliance, procurement, or audit in a comparable industry.