Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
Checkout.com http://Checkout.com is actively looking for a highly skilled and proactive Senior Associate, Third-Party Risk Management (TPRM) to join our growing global team.
In this role, you will be at the forefront of protecting our business by conducting thorough due diligence and risk assessments on our external suppliers
You will also work alongside a team of experienced TPRM Associates, reporting to the TPRM Manager, driving best practices, ensuring high-quality risk assessments, and spearheading strategic process improvements.
If you have a strong foundation in vendor risk, a deep understanding of information security, and a passion for continuous improvement in a fast-paced environment, we want to hear from you.
What You Will Be Doing
- Risk Assessments & Due Diligence: Conduct end-to-end third-party risk assessments, minimum due diligence, and control evaluations.
- Evidence Validation: Review and analyze vendor compliance documentation, including control reports, certifications and security policies to validate their cybersecurity and operational resilience postures.
- Gap Analysis & Remediation: Identify control gaps in vendor controls. Work directly with vendors to agree on appropriate remediation actions and track them to completion.
- Workflow & SLA Management: Manage a continuous pipeline of vendor assessments, ensuring that reviews are completed efficiently, accurately, and within agreed-upon service level expectations.
- Stakeholder Collaboration: Act as a key point of contact for internal business owners and Procurement, guiding them through the TPRM process and escalating complex risks to internal Subject Matter Experts (SMEs) when necessary.
- Process Improvement & AI Integration: Support the wider TPRM team in strategic initiatives, leveraging AI and automation tools to drive process improvements, execute system migrations, maintain data hygiene, and continuously enhance our risk management frameworks.
- Ad Hoc Initiatives: Take ownership of agile, ad hoc risk management projects as they arise, adapting quickly to business needs and delivering prompt, high-quality results.
About You
- Experience: 5+ years of proven experience in Third-Party Risk Management, IT Risk, IT Audit, or a closely related Information Security Governance role.
- Framework Knowledge: Strong working knowledge of global security and risk frameworks, including ISO standards and SOC reporting, alongside a strong foundation in Third-Party Risk Management (TPRM) methodologies, cybersecurity principles, data privacy regulations amongst others.
- Accountability & Time Management: Highly organized with a strong sense of ownership. You effectively shoulder responsibility for multiple concurrent workloads, manage your time seamlessly, and consistently deliver prompt results.
- Leadership Skills: A proactive self-starter with experience mentoring peers, managing complex workloads, and acting as an escalation point for junior team members.
- Communication: Excellent written and verbal…