Third-Party Risk Management Program Manager

Role Overview

The Third-Party Risk Management Program Manager will lead and strengthen the enterprise-wide approach to managing third-party risk, helping protect the organization while enabling informed business decisions. This role will drive the end-to-end TPRM program, partnering across Legal, Information Security, Privacy, Procurement, and business teams to assess, mitigate, and govern vendor risk throughout the supplier lifecycle.

The duties and responsibilities of this position consist of leading and evolving the enterprise TPRM program strategy, governance framework, and roadmap, establishing and maintaining risk-based standards, policies, and governance processes, and managing vendor intake, risk tiering, and due diligence processes.

If you're passionate about building risk-aware partnerships and driving enterprise impact, this role may be a fit for you. You will engage with peers on-site two days a week and have the flexibility for remote work three days a week.

• Bachelor’s degree from an accredited college or university and/or equivalent working experience
• Minimum of 6-8 years’ experience in Third-Party Risk Management, Vendor Risk, or Supplier Governance, Procurement, Sourcing, Compliance, Audit, and/or Information Security
• Experience in Third-Party Risk Management, Vendor Risk, Supplier Governance, or enterprise risk program management
• Experience in Procurement, Sourcing, Compliance, Audit, Information Security, Privacy, or Business Continuity
• Strong understanding of the third-party risk lifecycle and risk concepts, including inherent and residual risk
• Experience operating in cross-functional, matrixed environments
• Demonstrated ability to influence senior stakeholders, drive remediation accountability, and escal material risks without direct authority
• Experience preparing leadership-level reporting, risk summaries, decision options, and audit-ready documentation
• Experience implementing risk acceptance, remediation tracking, issue management, or governance reporting processes
• Experience in a Procurement-led or intake-to-pay operating model
• Familiarity with TPRM and procurement platforms (e.g., Coupa, Levelpath, Service Now, CyberGRX)
• Certifications such as CTPRP, CRISC, CISA, or similar
• Strong program management, governance, and process ownership mindset
• Ability to translate technical and regulatory risk into business impact
• Excellent stakeholder coordination, influence, and escalation management across multiple functions
• Ability to challenge incomplete reviews, unresolved remediation, or risk acceptance gaps while maintaining a business-enabling approach
• Detail-oriented with strong documentation and audit discipline
• Pragmatic problem-solver with a balance of risk awareness and business enablement

• Three medical plans
• Prescription drug coverage
• Enhanced Fertility benefits
• Flexible Spending Accounts
• Health Savings Account (including employer contribution)
• Dental and Vision
• Basic and Supplemental Life Insurance
• Short-Term and Long-Term Disability
• Paid observed holidays
• 2 paid floating holidays for U.S. hourly employees
• Flexible Time Off (FTO) offered to U.S. salaried employees — no accruals and no caps
• Paid Time Off (PTO) offered to all other employees in the U.S. and Canada
• Paid parental leave
• Paid time off to volunteer in your community
• Charitable Giving Match Program
• 401(k) with 6% company matching
• Employee Stock Purchase Plan
• Career development, networking, and team-building opportunities