Risk Analyst

The Supply Chain Risk Analyst will be responsible for identifying, assessing, and managing risks associated with third parties. The analyst will work closely with various departments and stakeholders to develop and implement effective risk management strategies. Additionally, the analyst will be responsible for understanding and mitigating Environmental, Social, and Governance (ESG) risks within the supply chain. This includes evaluating the environmental impact of suppliers, ensuring fair labor practices, and maintaining compliance with governance standards.

Essential Duties and responsibilities

• Risk Assessment: Assess risks including Geographical, Reputational, Cyber Security, Sanctions, Human Resources, Business Continuity, Anti-Bribery/Anti-Corruption, Artificial Intelligence, ESG, and Privacy.
• Daily Operations: Perform day-to-day responsibilities of the SCRM program, including intake and handling of requests for new third parties, gathering documentation for due diligence and onboarding tasks, and maintaining the SCRM database.
• Monitoring: Monitor third parties for changes in their risk profile, including mergers and acquisitions, regulatory changes, and other external factors.
• Risk Assessment: Conduct risk assessments on new and existing third parties.
• Database Maintenance: Ensure the integrity of the SCRM database by accurately documenting and consistently updating contact information, products, and services to maintain reliable and trustworthy data.
• Reporting: Assist in generating standardized reports to inform business owners and management on third-party risk and performance.
• Risk Management: Encourage and enable effective risk management change.
• Support: Provide support and expertise to business owners on third-party relationship management.
• Incident Management: Conduct ongoing management of escalations and incidents related to due diligence and monitoring of third parties.
• Remediation: Facilitate or assist in the remediation of any third-party-related findings or issues.
• Program Improvement: Contribute to the improvement of the Supply Chain Risk Management Program.
• Vendor Communication: Communicate with third-party vendors to address identified risks and ensure compliance with contractual obligations and regulatory requirements.
• Industry Trends: Stay abreast of industry trends and best practices related to Supply Chain Risk Management.
• Special Projects: Assist with any special projects as needed.