Third Party Risk Manager

Job Summary

Leading and maturing the third-party risk management program, the full-time remote Third Party Risk Manager will focus on cybersecurity, data privacy, and AI governance while collaborating with various teams to assess vendor risks and ensure compliance.

Key responsibilities

• Lead the third-party risk program, prioritizing work and recommending mitigations for identified risks
• Conduct comprehensive risk assessments of vendors, reviewing relevant documentation and data flows
• Manage the vendor risk lifecycle, including onboarding, periodic reviews, and offboarding processes

Required qualifications

• 5-7 years of experience in third-party/vendor risk, information security, or compliance, with a Bachelor's degree in a related field
• Experience in building or improving risk programs and assessments, with familiarity in procurement processes
• Proficiency in Microsoft 365 and relevant TPRM/GRC platforms, along with security-rating tools
• Working knowledge of security, privacy, and AI frameworks and regulations, such as NIST and GDPR
• Certifications such as CTPRP, CRISC, CISA, CISM, CISSP, or AIGP are preferred