Director, Enterprise Third-Party Risk Management Operations & Governance

## Director, Enterprise Third-Party Risk Management Operations & Governance Apply:
Boston, MA:
Full time:
Posted Today:
REQ-30206
** Job Description
**** General

Summary:

** As a key leader within Strategic Sourcing and Enterprise Third-Party Risk Management (TPRM), the Director, Enterprise Third-Party Risk Management Operations & Governance is responsible for ensuring seamless operational execution of the enterprise TPRM program while preparing the organization for future scale and maturity.

This role serves as the bridge between strategic program development and operational delivery, partnering closely with TPRM leadership, business stakeholders, Risk SMEs, sourcing teams, and managed service providers (MSPs) to ensure efficient execution, consistent governance, stakeholder engagement, and operational excellence across the third-party risk lifecycle.

The Director will focus on integrating existing and emerging TPRM capabilities, strengthening stakeholder partnerships, enhancing governance and reporting, and building scalable operating models that support Vertex's evolving risk management objectives.
** Key

Duties and Responsibilities:

**** Operational Integration & Program Delivery
*** Lead operational integration of existing and newly established TPRM processes to create a seamless end-to-end third-party risk experience.
* Partner with TPRM leadership to translate strategic priorities into operational execution plans and measurable outcomes.
* Ensure consistent execution and oversight of supplier criticality, risk assessment, issue management, ongoing monitoring, and remediation processes.
* Identify and remove operational bottlenecks while driving improved efficiency and stakeholder experience.
* Support implementation and stabilization of expanded TPRM capabilities and operating models.
** Governance & Executive Reporting
*** Own development and execution of TPRM governance routines, including operational reviews, risk escalation forums, and executive reporting.
* Establish meaningful performance measurements and service-level metrics across the TPRM ecosystem.
* Develop clear and actionable reporting for senior leadership focused on program effectiveness, risk trends, capacity, and operational health.
* Ensure alignment between TPRM operational performance and enterprise risk management objectives.
** Managed Service Provider (MSP) Oversight & Scale Readiness
*** Provide leadership oversight of external TPRM service providers and operational partners.
* Establish performance standards, service expectations, escalation pathways, and continuous improvement mechanisms.
* Drive operational readiness planning to support increasing assessment volumes, geographic expansion, and future program maturity.
* Evaluate resource models, workflows, and capabilities required for long-term program scalability.
** Stakeholder Engagement & Partnership
*** Elevate partnerships across Strategic Sourcing, Legal, Compliance, Information Security, Quality, Finance, Enterprise Risk Management, and business functions.
* Act as a trusted advisor to stakeholders on TPRM operational processes, governance expectations, and risk escalation practices.
* Drive alignment among risk owners, business stakeholders, and operational teams to ensure consistent decision-making and accountability.
* Facilitate communication across functions to improve transparency, responsiveness, and overall program effectiveness.
** Continuous Improvement & Operational Excellence
*** Identify opportunities to simplify, standardize, and optimize TPRM processes.
* Partner with process, technology, and analytics leaders to improve user experience and operational effectiveness.
* Support implementation of automation, reporting enhancements, and workflow improvements that…