Company Overview

The organisation operates in the financial technology industry, delivering digital financial services through a network of technology providers, payment partners, cloud platforms, and external service organisations. Its operating model requires effective third-party oversight to ensure that external providers meet appropriate standards for security, service delivery, operational resilience, and regulatory compliance.

Role Summary

The Fintech Vendor Risk Analyst will assess and monitor risks associated with third-party technology providers, financial service partners, and outsourced operational services. The position involves conducting vendor assessments, reviewing security and compliance documentation, maintaining risk registers, and supporting the implementation of effective third-party risk management controls.

The successful candidate will work closely with procurement, information security, compliance, legal, and operational teams to evaluate the reliability and suitability of external service providers. The role requires strong analytical skills, an understanding of financial technology operations, and the ability to identify potential risks before they affect business continuity or service delivery.

Key Responsibilities

• Conduct risk assessments of third-party vendors, technology providers, payment partners, and outsourced service organisations.

• Review vendor documentation covering information security, data protection, business continuity, and operational controls.

• Evaluate the potential impact of third-party service failures on financial operations and customer-facing services.

• Maintain accurate vendor risk registers, assessment records, and supporting documentation.

• Identify weaknesses in vendor security practices, service arrangements, and operational risk controls.

• Coordinate with internal stakeholders to obtain relevant information during vendor onboarding and periodic reviews.

• Review service-level agreements and supporting documentation to identify operational and performance-related concerns.

• Monitor changes in vendor ownership, service delivery arrangements, security posture, and business continuity capabilities.

• Support remediation tracking by recording identified weaknesses, agreed corrective actions, and outstanding issues.

• Assist with reviewing third-party incidents and evaluating their impact on business operations.

• Prepare risk assessment summaries and management reports for relevant internal stakeholders.

• Support improvements to vendor governance procedures and third-party risk assessment frameworks.

Requirements and Qualifications

• Bachelor’s degree in Risk Management, Finance, Business Administration, Information Technology, Cybersecurity, or a related field.

• Previous experience in vendor risk management, operational risk, compliance, internal controls, or third-party governance.

• Understanding of financial technology operations and the risks associated with external service providers.

• Familiarity with information security standards, data protection principles, and business continuity requirements.

• Knowledge of frameworks such as ISO 27001, SOC 2, or comparable risk and control standards is an advantage.

• Experience reviewing vendor questionnaires, security assessments, contractual documentation, or risk reports.

• Strong analytical and investigative skills.

• Ability to assess complex information and communicate risk findings clearly.

• Excellent organisational skills and attention to detail.

• Ability to manage multiple vendor assessments and review deadlines.

• Strong written communication skills and confidence working with cross-functional teams.

Benefits

• Fully remote working arrangement within Estonia.

• Opportunity to develop expertise in third-party risk management within financial technology.

• Exposure to technology governance, operational resilience, and financial services risk controls.

• Collaboration with professionals across cybersecurity, legal, compliance, procurement, and operations.

• Opportunities for professional training and career development.

• A structured environment that values accountability, effective governance, and continuous improvement.

Application Instructions

Candidates should submit an updated CV detailing their experience in vendor assessments, operational risk, compliance, cybersecurity governance, or third-party oversight. Applicants are encouraged to describe their experience with risk registers, vendor due diligence, security documentation, and risk remediation processes.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.