Third Party Risk Management Manager

Job Summary

Leading a team of four analysts, the full-time remote Third Party Risk Management Manager will oversee vendor risk assessments, drive process improvements, and enhance cybersecurity policies to protect organizational data and operations.

Key responsibilities

• Lead, mentor, and develop a team of TPRM professionals, fostering a culture of accountability and operational excellence
• Manage the full vendor risk lifecycle, including onboarding, assessments, and offboarding, ensuring consistent application of TPRM standards
• Collaborate with cross-functional teams to integrate risk considerations into vendor engagement processes and enhance the cybersecurity vendor risk management program

Required qualifications

• 10+ years of experience in Third Party Risk Management, GRC, or information security risk
• 3+ years of experience in people management, with a proven ability to lead and develop teams
• Deep expertise in vendor risk assessment methodologies and control frameworks
• Hands-on experience with ServiceNow TPRM module
• Strong understanding of security and compliance frameworks such as NIST CSF and ISO 27001