Business Analyst Senior - Third party risk

Title: Supplier Risk Management Assessor
Location: Hybrid (Candidate must be able to work onsite if converted) in McLean VA
Duration: 6 Months Possible Contract-to-Hire (CTH)

Interview Process : 2 Rounds | 45 minutes each | Round 1: MS Teams (Video Mandatory) | Round 2: Onsite
Interview Placeholders: 08/05 - 1:00 PM | 08/06 - 9:00 AM & 2:00 PM | 08/07 - 11:00 AM

Must-Have Qualifications

• Risk Assessment or Audit experience
• Knowledge of SOC 1 and SOC 2 Type II reports
• Third-party vendor risk management

Preferred:

• Certifications: CIA, CRISC, CISA, CISM
• Supply chain background
• Compliance/risk management audit experience
• Knowledge of ProcessUnity

Overview
ESC is seeking a proactive, results-driven professional who can independently drive work to completion. The ideal candidate will have strong analytical skills for assessing risks and controls, solid project management capabilities, and the ability to communicate escalations effectively. While direct risk management experience is preferred, candidates with transferable skills will also be considered.

Key Responsibilities

• Analyze and assess supplier risks, including technology, privacy, security, resiliency, and operational risks.
• Evaluate supplier controls and document risk findings.
• Recommend remediation plans to reduce identified risks.
• Collect and handle confidential financial information, including income, assets, and debts.
• Maintain confidentiality when handling sensitive information.
• Recommend risk mitigation strategies to improve current processes.
• Conduct research using online resources and stakeholder interviews.
• Adapt quickly in a fast-paced environment with changing priorities.
• Develop a strong understanding of business divisions and Freddie Mac's goals and values.
• Maintain high attention to detail and organizational standards.
• Communicate effectively, both verbally and in writing.
• Utilize MS Office and data entry tools efficiently.