TPRM Workflow & Risk Orchestration Manager
Listed on 2026-06-20
-
IT/Tech
Business Systems/ Tech Analyst -
Business
Business Systems/ Tech Analyst
Company Overview
Vertex is a global biotechnology company that invests in scientific innovation to create transformative medicines for people with serious diseases. Guided by a commitment to patients, scientific excellence, and operational integrity, Vertex brings together deep expertise, collaboration, and innovation to solve some of the most complex challenges in healthcare.
Role SummaryVertex is seeking a Manager, TPRM Workflow & Risk Orchestration to join the Global Sourcing & Procurement organization within the Source-to-Pay (S2P) Center of Excellence. This role is responsible for designing and embedding third‑party risk management (TPRM) into the end‑to‑end S2P lifecycle through workflow orchestration, lifecycle triggers, and execution guardrails. The Manager will ensure that supplier risk identification, assessment, and mitigation are seamlessly integrated across intake, sourcing, contracting, supplier onboarding, and ongoing supplier lifecycle processes.
This individual will translate enterprise risk frameworks into practical, scalable workflows that support compliant execution while preserving speed, usability, and a strong internal customer experience. This is a highly cross‑functional individual contributor role with significant influence across Sourcing, Legal, Risk, Compliance, Procurement Operations, Analytics, and Digital/IT. The role owns workflow design and execution enablement, while partnering with stakeholders who manage enterprise risk policy and core technology platforms.
- Design, implement, and maintain end‑to‑end TPRM workflows aligned to key supplier lifecycle events, including onboarding, contract initiation, renewal, and ongoing monitoring.
- Embed risk assessment, escalation, review, and remediation steps into S2P workflows to support consistent and audit‑ready execution.
- Balance strong risk coverage with operational efficiency and a user‑friendly experience.
- Define and operationalize trigger‑based models that initiate risk assessments based on supplier criticality, geography, service type, and lifecycle events.
- Integrate TPRM requirements into intake, guided buying, and orchestration tools.
- Ensure alignment of risk workflows across sourcing, contracting, and supplier management processes.
- Embed TPRM workflows into supplier onboarding and vendor master data processes to trigger the right risk activities.
- Define required supplier data elements, validation rules, approval flows, and controls that support risk classification, segmentation, and monitoring.
- Partner with Master Data and Procurement Operations teams to align supplier data processes with TPRM workflow requirements.
- Identify and resolve data quality gaps that affect risk visibility, compliance, or workflow execution.
- Translate TPRM workflow and supplier data requirements into system configurations across onboarding, vendor master, and risk assessment tools.
- Ensure supplier master data structures support effective workflow triggers and downstream risk processes.
- Support UAT, release readiness, and post‑go‑live stabilization for TPRM‑related enhancements.
- Drive scalable, standardized workflow designs aligned with broader S2P orchestration objectives.
- Monitor workflow performance, cycle times, control effectiveness, and overall risk coverage.
- Identify and implement enhancements that reduce process friction and improve compliance.
- Partner with Analytics teams to define KPIs, dashboards, and reporting requirements for workflow performance and risk visibility.
- Define clear roles, responsibilities, and handoffs across TPRM, Sourcing, Contracting, Legal, Risk, and Operations teams.
- Support issue resolution and escalation for complex or high‑risk supplier scenarios.
- Ensure alignment with S2P process standards, governance frameworks, and enterprise orchestration strategy.
- Bachelor’s degree required; advanced degree or relevant certifications preferred.
- 6–8+ years of…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).