Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Community Financial System, Inc. (CFSI) is seeking a professional to support its third-party risk management program. This role involves administering the vendor due diligence portal, responding to customer inquiries regarding information security, conducting vendor assessments, and supporting AI governance activities. The position is crucial for strengthening the overall third-party risk framework and ensuring alignment with established guidance.

Responsibilities

Administer and maintain the third-party due diligence portal, ensuring current content, standard responses, supporting documentation, and security artifacts remain aligned with internal policies and controls.
Coordinate, complete, and track information security questionnaires from customers, partners, auditors, and other authorized third parties.
Partner with stakeholders across various business lines to gather responses and supporting evidence.
Perform information security due diligence reviews of new and existing vendors through review of SOC reports, questionnaires, policies, penetration test summaries, business continuity materials, and other documentation to assess security posture, control environments, data protection practices, regulatory considerations, and overall risk.
Identify, document, and communicate information security risks, control gaps, due diligence findings, and remediation recommendations to support management and governance decision-making.
Support AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved use cases, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.
Support enhancements to third-party risk processes, standards, reporting, workflows, templates, metrics, and ongoing monitoring activities.
Support identity and access management governance, review, and related coordination activities as assigned.
Track remediation items, follow-up actions, and review outcomes to support timely resolution.
Maintain organized assessment records, questionnaires, exceptions, and supporting documentation in accordance with policy and regulatory expectations.
Support audits, examinations, and internal reviews related to vendor management, information security due diligence, and AI Governance oversight.
Perform other Information Security, third-party risk, and related governance duties as assigned by management.
Provide assistance wherever necessary to help the Branches and the Bank in achieving their annual goals.
Travel to other branches in the area to provide support as needed and to ensure proper staffing and service levels.

Requirements

All applicants must be 18 years of age or older.

Skills

Strong analytical and communication skills.
Proficient in conducting third-party information security due diligence, including reviewing SOC reports, penetration tests, and security questionnaires.
Familiarity with risk assessment frameworks (e.g., NIST, SIG, CIS) and emerging AI governance guidelines.
Ability to work independently and collaboratively to identify, document, and communicate security risks.
Experience or familiarity with emerging technology risk frameworks (such as AI Governance or the NIST AI Risk Management Framework) is highly desired.
Financial industry experience (e.g., familiarity with GLBA, FFIEC, or FDIC guidelines) is preferred but not required.

Location

Upstate New York
Northeastern Pennsylvania
Vermont
Western Massachusetts

Work Type

Full-time

Experience Level

4+ years of experience in Information Security
4+ years of experience in Risk Management or Third-Party Risk Management (TPRM) with a strong focus on Information Security and GRC
4+ years of experience in Information Technology with a dedicated focus on Security or GRC

Education Level

Bachelor’s Degree required in Information Security, Cybersecurity, Information Technology or equivalent experience considered

Salary/Compensations

USD $28.85/Yr.
USD $47.54/Yr.

Benefits

11 paid holidays
paid vacation
Medical, Vision & Dental insurance
401K with generous match
Pension
Tuition Reimbursement
Banking discounts

About the Company

At Community Financial System, Inc. (CFSI), we are dedicated to providing our customers with friendly, personalized, high-quality financial services and products.
Our retail division, Community Bank, N.A., operates more than 200 customer facilities across Upstate New York, Northeastern Pennsylvania, Vermont and Western Massachusetts.
Beyond retail banking, we also offer commercial banking, wealth management, investment management, insurance and risk management, and benefit plan administration.
To ensure our people can enjoy long and successful careers here at CFSI, we offer competitive compensation, great benefits, and professional development and advancement opportunities.

Equal Opportunity

As an equal-opportunity workplace and affirmative-action employer, we celebrate and support a diverse workplace for the benefit of all: our employees, customers and communities.