Third Party Risk Oversight & Challenge Associate

Job Description

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Associate, Third Party Risk Oversight & Challenge

The Impact You Will Have in This Role

The Associate, Third Party Risk Oversight & Challenge will support multiple functions in the second-line oversight of DTCC's Third Party Risk Management program. This role will provide independent review, credible challenge, and risk insight across the third-party lifecycle, including due diligence, ongoing monitoring, control effectiveness, vendor incidents, contingent worker oversight, and resilience planning.

Key Responsibilities

• Provide independent oversight and credible challenge of third-party risk activities across due diligence, risk assessment, monitoring, remediation, termination, and compliance with internal and regulatory expectations.
• Develop independent risk opinions on significant third-party engagements, elevated-risk relationships, residual risk exposures, mitigation plans, and escalation needs.
• Execute control assurance reviews and targeted testing across key third-party risk processes, including onboarding, monitoring, issue management, contingent worker oversight, and resilience planning.
• Review material vendor incidents, service disruptions, cybersecurity events, and operational issues, including root cause analysis, remediation plans, and lessons learned.
• Conduct thematic and horizontal reviews to identify recurring issues, systemic risks, control gaps, concentration concerns, and emerging risk themes.
• Review and challenge exit strategies and contingency plans for critical and high-risk third-party relationships, including feasibility, recoverability, substitutability, and testing results.
• Prepare risk assessments, oversight reporting, and recommendations for senior management, risk committees, governance forums, regulatory examinations, and internal audits.

• Minimum of 4 years of experience in Third Party Risk Management, Operational Risk, Vendor Risk Management, Internal Audit, Regulatory Risk, Compliance, or a related risk discipline; financial services or regulated industry experience preferred.
• Bachelor's degree preferred or equivalent experience.
• Strong understanding of third-party risk regulatory expectations, operational resilience, control assurance, risk reporting, governance, and enterprise risk management frameworks.
• Experience providing independent oversight, credible challenge, control testing, risk assessments, or advisory support across third-party, operational, technology, resilience, or supplier risk programs.
• Strong analytical, critical thinking, written communication, executive presentation, and stakeholder influencing skills.
• Ability to maintain independence, objectivity, and credibility while driving accountability and practical risk outcomes.

• Deep understanding of third-party risk frameworks and lifecycle activities.
• Ability to balance objective challenge with trusted stakeholder partnership.
• Strong risk judgment, problem-solving, communication, and influencing skills.
• Proactive, execution-focused mindset with a commitment to continuous improvement and strong risk culture.
• Ability to manage multiple priorities and support concurrent workstreams with disciplined execution, sound judgment, and adaptability.

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).