Third-Party Risk Manager

This role owns the day-to-day operation of the Company’s third-party risk management (TPRM) program. The Third-Party Risk Manager administers vendor onboarding, risk tiering, due diligence, periodic reassessment, ongoing monitoring, and termination across the full vendor lifecycle in accordance with the Third-Party Risk Management Policy (TPRM02).

This position is the primary point of contact for business owners engaging new vendors, for vendors responding to due diligence requests, and for internal partners — Legal, Compliance, Information Security, and Finance — who depend on accurate vendor risk information. The role administers the Company’s vendor management software platform, maintains the authoritative vendor inventory, and produces reporting consumed by the Risk Management Committee and senior leadership.

The Third-Party Risk Manager works under the oversight of the Chief Information Officer and operates within the regulatory expectations of FHFA, CFPB, HUD, state financial regulators, GSEs, and secondary market investors.