KYV Specialist, 3rd Party and Vendor Due Diligence

This is a fully remote position, open to applicants in Europe.

📋 Description

• Oversee onboarding processes for Third Parties, outsourcing partnerships, ICT providers, and other vendors relevant to KYV.

• Gather vendor data, questionnaires, declarations, and supporting documentation.

• Ensure that onboarding files are comprehensive for evaluation, approval, or contracting.

• Monitor onboarding progress, missing documentation, pending actions, and outstanding issues.

• Maintain records of onboarding decisions, evidence, approvals, and escalations.

• Coordinate the collection of due diligence evidence and organize information on ownership, governance, financial health, regulatory compliance, sanctions, adverse media, subcontractors, data processing, certifications, business continuity, and exit strategies.

• Identify incomplete, inconsistent, outdated, or concerning due diligence findings and escalate significant issues.

• Assist in enhanced due diligence for critical, significant, ICT, high-risk, third-country, or subcontracted arrangements.

• Aid in inputs for third-party risk assessments, risk documentation, mitigating controls, residual risks, and action plans.

• Conduct initial checks for completeness and consistency, triggering reassessments after significant changes.

• Manage the Third-Party Inventory and oversee vendor record creation, updates, reviews, and closures.

• Execute data quality checks and monitor for outdated records, missing attestations, expired documentation, and overdue updates.

• Support the Outsourcing Register and DORA Register of Information extracts.

• Maintain the Third-Party & Outsourcing Risk Register, track action plans to completion, and assist with risk acceptance requests.

• Perform ongoing vendor screening and monitoring for sanctions, adverse media, enforcement actions, ownership changes, certification expirations, and other risk indicators.

• Facilitate annual and periodic vendor reviews by coordinating the collection of updated evidence and monitoring outcomes.

• Collect and track conflicts of interest, subcontractor, fourth-party, service-chain, and location data.

• Escalate significant subcontracting and critical subcontracting changes.

• Assist with exit and offboarding processes, including termination, transitions, data return, data deletion, and residual-risk documentation.

• Generate operational reports on onboarding pipelines, overdue documentation, expired records, outstanding risks, overdue actions, screening results, monitoring exceptions, and register completeness.

• Escalate significant vendor challenges, unresolved risks, missing critical documentation, or ongoing non-responsiveness.

⛳️ Requirements

• Proven experience in financial crime operations, vendor risk management, third-party risk, outsourcing governance, compliance operations, operational risk, or a similar control environment.

• Background in coordinating due diligence, evidence collection, screening, or risk assessment processes.

• Understanding of first-line and second-line responsibilities.

• Familiarity with third-party onboarding, vendor monitoring, risk registers, inventory management, and audit evidence.

• Experience collaborating with Risk, Compliance, Legal, Information Security, DPO, Finance, and business units.

• Comprehension of third-party risk management and outsourcing lifecycle controls.

• Awareness of KYV/vendor due diligence principles.

• Knowledge of sanctions, adverse media, regulatory enforcement, and ownership screening.

• Basic understanding of outsourcing, ICT third-party risk, DORA, MiCA, GDPR, and EBA outsourcing expectations.

• Familiarity with evidence standards, audit trails, escalation procedures, and risk documentation.

• Ability to differentiate operational coordination from risk ownership, legal ownership, ICT assurance, and independent review.

• Strong skills in documentation and evidence management.

• Capacity to manage multiple onboarding, review, and monitoring cases simultaneously.

• Ability to identify missing, inconsistent, expired, or risk-related information.

• Clear discipline in escalation and follow-up.

• Proficient in spreadsheets, workflow tools, registers, ticketing systems, and document repositories.

• Capability to prepare structured operational updates for Risk Management, senior stakeholders, and audit purposes.

• Ability to navigate detailed regulatory and policy requirements without unnecessary bureaucracy.

🏝️ Benefits

• Benefit Bar – up to €230/month flexible monthly budget for sports, mental health, coworking, home office, or medical-related expenses.

• Optional office locations and relocation assistance.

• Flexible, asynchronous work environment.

• Funding for courses, certifications, and professional development.

• Support for language learning.

• Opportunities for cross-team learning and knowledge sharing.

• Medical insurance or reimbursement based on location.

• Access to mental health support.

• Financial assistance for significant life events.

• Merchandise shop with a rewards system.

• Team offsites and company events.