Vendor Management Risk Analyst

Overview:

At Legal & General America, we aim to make a positive difference in the lives of our customers, partners, colleagues, and the communities in which they live. As a recognized market leader of term life insurance, we’re working to transform our business through innovation and technology to provide products and solutions that help American families secure their financial futures.

Our employees' passion, dedication and hard work, as well as our career development opportunities, benefits, and employee activities contribute to our positive workplace culture.

Working closely with various departments across the organization, the Vendor Management Risk Analyst will play a vital role in assessing the security, privacy, compliance, and operational risks posed by vendors and implementing risk mitigation strategies to safeguard company interests.

Responsibilities:

1. Facilitate the on-time completion of initial and recertification reviews including collecting and assessing vendor questionnaires and audit reports (SOCs) and security documents, assess and document the risk and conclusions drawn from the assessment.
2. Track and conduct comprehensive risk assessments of vendors, based on a periodic schedule, to evaluate their capabilities, controls, and adherence to internal policies, standard standards, and regulatory requirements.
3. Compose assessment report containing findings and recommendations and present to business and the vendor.
4. Develop and implement risk mitigation strategies and action plans to address identified risks and vulnerabilities associated with vendor relationships, and coordinate with business stakeholders to monitor and drive resolution.
5. Ensure appropriate risk tier is assigned and due diligence completed by performing a deep dive analysis.
6. Monitor and track vendor risk indicators, including cybersecurity incidents and regulatory changes to assess the ongoing risk exposure and potential impacts.
7. Provide regular reporting to senior management on the status of vendor risk management activities and key findings.
8. Stay informed about regulatory changes, industry trends, emerging risks, and best practices in vendor management to enhance organization’s vendor management capabilities and practices.
9. Update vendor management system continuously, track key vendor metrics, and perform other duties as assigned in support of Front office.

Qualifications:

Education

Bachelor's Degree in Risk, Business, Business Technology, Cybersecurity, or a related (may consider equivalent combination of education and experience).

• 3 to 5 years of relevant work experience (e.g., vendor management, information security, third party risk management) with insurance industry experience is preferred
• Strong understanding of vendor management lifecycle and vendor risk management principles, methodologies, and best practices.
• Subject matter expertise in SSAE 16, SOC 2, Shared Assessments, etc.
• Broad knowledge of information security and privacy fundamentals, and experience in applying security frameworks such as NIST or ISO 27000.
• Proficient in the design and implementation of effective control framework.

• Detail-oriented and organized, with the ability to manage multiple priorities and deadlines in a fast-paced environment.
• Proficiency in using vendor management tools, software, and technologies to support third-party risk assessment and monitoring activities.
• Excellent analytical, problem-solving, and critical-thinking skills, with the ability to assess complex situations and make informed risk-based decisions.
• Acute attention to detail with a high level of data integrity and accuracy.
• Demonstrated solid written and oral business writing, communication, and presentation skills with ability to effectively communicate to and influence at all levels of the organization.
• Self-motivated

What’s in it for you?

The expected hiring compensation range for this position is $88,300 - $115,00 annually. This position is hybrid requiring 3 days in our Frederick, Maryland office.

Bonuses are pro-rated based on start date. This role has 15 vacation days and 10 sick days that are accrued on a bi-weekly basis. Employees also have 9 paid holidays throughout the calendar year.

Enjoy time off to volunteer for those causes that matter most to you!

The Company reserves the right to change benefits plans at any time.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request accommodation.

governance