Third Party Risk Analyst

About Tala

Tala is on a mission to unleash the economic power of the Global Majority – the 4 billion people overlooked by existing financial systems. With nearly half a billion dollars raised from equity and debt, we are serving millions of customers across three continents. Tala has been named by the Fortune Impact 20 list, CNBC’s Disruptor 50 five years in a row, CNBC’s World's Top Fintech Company, Forbes’ Fintech 50 list for eight years running, and Chief's The New Era of Leadership Award. We are expanding across product offerings, countries and crypto and are looking for people who have an entrepreneurial spirit and are passionate about our mission.

By creating a unique platform that enables lending and other financial services around the globe, people in emerging markets are able to start and expand small businesses, manage day-to-day needs, and pursue their financial goals with confidence. Currently, over nine million people across Kenya, the Philippines, Mexico, and India have used Tala products. Due to our global team, we have a remote-first approach, and also have offices in Santa Monica, CA (HQ); Nairobi, Kenya; Mexico City, Mexico; Manila, the Philippines; and Bangalore, India.

Most Talazens join us because they connect with our mission. If you are energized by the impact you can make at Tala, we’d love to hear from you!

The Supplier Risk Analyst is a key role in managing third party risk by ensuring that vendors are appropriately selected, monitored, and managed through all stages of the vendor lifecycle.

• Conduct due diligence reviews of potential vendors, including assessment of their capabilities, compliance practices, and suitability for partnership or engagement.
• Perform risk assessments to categorize vendors into tiers based on factors such as data security, business criticality, reputational impact, and annual spend.
• Monitor vendor performance and contract renewal or termination management.
• Collaborate with stakeholders across the organization to ensure compliance with vendor management policies and procedures.
• Assist in the onboarding and offboarding of vendors, ensuring that all necessary steps are completed.
• Identify and communicate potential vendor risks to management.
• Continuously monitor the risk posture of existing vendors using tools and platforms for financial health, cybersecurity and compliance.
• Investigate vendor-related incidents and assess their impact on the organization.
• Develop and implement corrective action plans in collaboration with vendors and internal compliance audit team members.

• What will you be doing every day?

• Monitor requests submitted by business stakeholders through email or Slack notifications.
• Track the progress of requests via the market-specific dashboard.
• Adhere to market-specific requirements for Philippines, Mexico, Kenya, India, US and emerging markets. These requirements are subject to change based on the nature of the engagement.

• Verify that the request follows the correct workflow and has received complete and accurate approvals.

• Compliance checks:

• Complete vendor scoring based on the information provided in the request.
• Assign tier levels depending on the computed risk score. Refer to the global vendor management policy for guidance.

• Run OFAC and ComplyAdvantage checks. ComplyAdvantage checks are required for key vendor personnel if ownership is 10% or more (UBO).
• If there are matches in the OFAC and ComplyAdvantage checks, escalate to the Supplier Risk Manager and the requestor. Complete a Risk Acceptance Form (RAF) if needed.

• Review the operational and infosec questionnaires. Discuss the responses on the InfoSec questionnaire with the InfoSec reviewer and follow up on relevant items.

• Renewals:

• Check contract details and assign renewal schedules.

• Administrative function:

• Manage user access and roles in accordance with their responsibilities.
• Regularly review and update Out of Office assignments designated by approvers.
• Collaborate with the vendor management support team to address vendor management -related issues.
• Modify vendor management workflow as required.
• Update access roles as needed.
• Quarterly/Annually check for updates on market-specific templates, such as accounting and legal templates (e.g., MNDA, DPA).
• Assist in maintaining up-to-date knowledge of vendor risk management best practices and regulatory requirements.

• Vendor/Partner Request:

• Assist in completing vendor and partner initiated due diligence documentation.
• Coordinate with stakeholders on the needed vendor requirements.

• Bachelor's degree in business, finance, or a related field.
• 2 - 5 years of experience in vendor management, risk management, or a related field.
• Strong analytical and problem-solving skills.
• Strong understanding of regulatory frameworks and standards (i.e., SOC 2, ISO 27001, GDPR).
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Proficiency in Google Workspace such as Google Docs, Google Sheets, Google Slides. 

Our vision is to build a new financial ecosystem where everyone can participate on equal footing and access the tools they need to be financially healthy. We strongly believe that inclusion fosters innovation and we’re proud to have a diverse global team that represents a multitude of backgrounds, cultures, and experience. We hire talented people regardless of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.