Vendor Risk Assessment Center (VRAC) Analyst
Country: Spain
**WHAT YOU WILL BE DOING**
**Aquanima **is looking for a **Vendor Risk Assessment Center (VRAC) **Analyst, based in our Boadilla del Monte office.
**WHY YOU SHOULD CONSIDER THIS OPPORTUNITY**
**WE ARE AQUANIMA GRUPO SANTANDER **, a **100% SANTANDER **company.
**WE ARE GLOBAL LEADERS in PROCUREMENT SERVICES and THIRD-PARTY RISK MANAGEMENT with +20 YEARS OF EXPERIENCE **providing valuable solutions to Grupo Santander and +100 CLIENTS, from different sectors, around the world.
**HOW DO WE WORK?**
**WE ARE TECHNOLOGICALLY FLEXIBLE **, which allows us to operate with any technology. The client's or deploy the best tools on the market, according to the needs, objectives, and dimensions of the service. Because we are at the forefront of **INNOVATION and TRENDS, **and we know the latest developments.
Our offer is led by a layer of **ADVISORY **thanks to the deep expertise we have, with which we help our customers to identify their needs and define the best strategy and model of procurement processes for our services:
- AQN BPO | Procurement process outsourcing
- AQN TPRM | Third-party risk control and mitigation in key dimensions
- AQN STRATEGIC SOURCING | Management and Optimization of spend categories
And all with a clear objective**:RESPONSIBLE EFFICIENCY **. Because we not only care about the what, we also care about the how.
That's how **WE ARE at AQUANIMA **, as part of Santander.
Santander is proud of being an organization where there are equal opportunities regardless of gender identity, culture, and disability. Our mission is to contribute to help more people and business prosper.
**WHAT YOU WILL BE DOING**
As **Vendor Risk Assessment Center (VRAC) Analyst **you will be responsible for the following activities:
**Quality Assurance (QA) Performance**
- Review of the Risk assessments performed by Aquanima´s VRAC teams in the different countries on the following risk dimensions: CYBER; Security (SEC), Facilities (FAC), Data Protection (DP) and Business Continuity Plan (BCP) according to the QA planning.
- To produce a report based on the conclusions of the analysis and to communicate the result to the VRAC teams across the different countries.
- Monitoring of the QA corrective action plan in each country.
- Support the countries with trainings and remediation plans.
**Intragroup Certification**
- Certification of applicable intra-group controls (SEC/CYBER/BCP) according to the nature of the entities for certification.
- To manage and execute with autonomy the Risk Assessments in accordance with the agreed methodologies and corporate policies and procedures.
- To ensure effective communication with different stakeholders to complete the certification according to corporate standards.
**Operations Management and QA**
- Continuous challenge of VRAC operations and processes.
- To Keep up to date with VRAC Country heads in relation to global initiatives and/or model evolution.
- To Work closely with the integral Third Party Risk Management (TPRM) on the evolution of risk methodologies.
- To assist the global TPRM on IT initiatives.
**REQUIREMENT**
- Bachelor's or Master's degree in Business, Engineering or similar.
- Experience 1- 6 years in similar position.
- Desirable: previous experience in a risk mgmt., compliance or audit function
- Languages: English, highly valued Portuguese or German