Manager, Third Party Risk Management

Our risk management department excels in risk assessment by leveraging extensive industry knowledge, analytical skills, and a systematic approach to identify and mitigate risks. We ensure effective risk management tailored to BOKF's needs through comprehensive evaluations, continuous monitoring, and interdepartmental collaboration. By reviewing operations, providing feedback on best practices, and identifying opportunities to enhance controls, we help BOKF achieve its objectives and improve overall risk management.

TheManager of Third-Party Risk Managementoversees staff and coordinates third-party risk assessments, including onboarding, monitoring, and resolving issues. This role provides strategic direction and tactical oversight to ensure risk mitigation, regulatory compliance, and performance management of third parties. Key duties include managing vendor onboarding and risk evaluations, ensuring compliance with corporate policies and regulations, overseeing workflow and reporting on vendor risk and performance, partnering with Enterprise Contracts to address contractual risks, and interfacing with all bank departments, management levels, and third-party vendors. The manager ensures vendor risk decisions are made competently and ethically, maintaining the integrity of the risk management process.

Our team is centered on vigilance, analytical thinking, and collaboration. We work together to identify, assess, and mitigate risks, creating an environment where growth and skill enhancement are highly valued. This proactive and cooperative approach ensures the bank's stability and resilience in a dynamic financial landscape.

• You will oversee third-party onboarding and risk assessment processes, ensuring documentation is complete and Vendor Relationship Owners (VROs) are properly trained.
• You will identify and establish strategic vendor partnerships that align with the bank's objectives and serve as the second line of defense for third-party risk.
• You will ensure all third-party engagements comply with relevant regulations, including OCC, CFPB, and Sarbanes-Oxley requirements.
• You will track and report key risk indicators (KRIs), vendor performance metrics, and manage the vendor evaluation and remediation process.
• You will compile and deliver vendor management reports for senior leadership, including quarterly, annual, and ad hoc updates.
• You will conduct and maintain training programs for staff and management on vendor risk management policies and procedures.
• You will perform internal audits, coordinate with auditors, and resolve compliance issues to ensure ongoing regulatory adherence.
• You will manage departmental operations, including staff supervision, workload delegation, budgeting, and conflict resolution.

Bachelor's Degree in Business, Accounting, Computer Science, Information Management, or a related field plus 7+ years of Vendor Management experience or a Regulatory Vendor Program Manager certification and 9+ years of practical or working experience within vendor risk management, legal, auditing or regulatory experience, or 13+ years of equivalent experience in contract/procurement/vendor relations.

• Highly competent in all abilities below:

  • Identifying Inherent Risk and Residual Risk

  • Stratifying/Categorizing Vendors

  • Identifying Due Diligence Requirements

  • Overseeing & Monitoring Activities

  • Acting as a 2LOD Credible Challenge

  • Contract Terms & Conditions

• In-depth knowledge of regulatory mandates and processes associated with managing third party service providers.

• Thorough knowledge and understanding of business unit needs.

• Knowledge of related IT controls and auditing practices.

• Excellent ability to foster partnerships.

• Excellent interpersonal skills, including teamwork, facilitation and negotiation.

• Excellent organizational, planning, analytical and technical skills.

• Excellent written and verbal communication skills.

• Demonstrated teamwork with IT and business unit departments.

• Demonstrated experience collaborating with external and internal partners.