Third Party Risk Management Lead

Summary

We are seeking an experienced Head of Third-Party Risk Management (TPRM) with experience in enterprise risk management, vendor governance, and cybersecurity risk to lead our global TPRM program. In this leadership role, you will define and execute the strategic vision for managing risks associated with third-party vendors, suppliers, contractors, and strategic partners. You will lead a high-performing team, establish enterprise-wide risk frameworks, interface with regulators and executive board members, and integrate advanced AI/automation tools to scale vendor risk oversight across the enterprise

Detailed Description

• Build, scale, and own the end-to-end global TPRM Strategy and Governance Framework aligned with enterprise risk appetite.
• Present regular risk intelligence dashboards and quarterly updates to the Executive Leadership Team.
• Establish policy standards, risk security scoring methodologies, and continuous monitoring controls across all operational, cybersecurity, financial, legal and compliance,
• Partner closely with Procurement, Legal, Cybersecurity, Privacy, Compliance, Architecture review board, IT Business Partner, Incident Security and Business Unit Leaders to enforce vendor risk controls during onboarding, contracting, and offboarding lifecycle stages.
• Embed risk clauses into contracts (audit rights, SOC 2 / ISO requirements, SLA penalties, incident notification windows).
• Manage, mentor, and build a team of risk analysts, assessors, and external third-party audit partners.
• Oversee high-risk vendor assessments, Fourth-Party (Nth-party) risk mapping, and concentration risk analyses.
• Direct response strategies for critical third-party security incidents (e.g., zero- day exploits, supply-chain breaches, major vendor outages).
• Drive the maturity and optimization of Enterprise GRC / TPRM platforms (e.g., ServiceNow, Levelpath, Ivalua. Security Scorecard (SSC) & 6 Clicks etc).
• Leverage AI-assisted risk scoring, automated due diligence workflows, and continuous monitoring capabilities (e.g., Security Scorecard, to streamline operations at scale.
• Maintain compliance with global regulatory standards (NIST, ISO27001, SOC1 & SOC2).
• Serve as the primary point of contact for external regulatory examinations and internal audit reviews of the TPRM framework.

Knowledge/Skills/Competencies

• Risk Governance &amp
• Strategy, Regulatory &amp
  Compliance
• Vendor Operations
• Automation &amp
• AI Integration
• Incident &amp
• Crisis Leadership
• Team Leadership
• SOC reports
• ISO27K
• Data privacy
• Security Architecture

Preferable Certification(s):
o Certified Third Party Risk Professional (CTPRP)
o Certified in Risk and Information Systems Control (CRISC)
o Certified Information Systems Auditor (CISA) / Security Manager (CISM)
o Certified Information Systems Security Professional (CISSP)

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.
 

Typical Experience

Required expereince is 14+years.

Typical Education

• Bachelor['s degree in related field or consideration of an equivalent combination of education and experience.

• Educational Requirements may vary by Geography

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.