Supplier Program manager

Role Overview

Position:
Supplier Management Program Manager

Location:

Richmond/Lynchburg, VA / Stamford, CTThis role is not eligible for employment visa sponsorship.

• Support the design, implementation, and continuous improvement of the enterprise supplier risk management framework across the supplier lifecycle.
• Execute and enhance risk‑based supplier assessments, including data security, privacy, operational resilience, regulatory compliance, financial stability, and materiality considerations.
• Ensure risk requirements are embedded at each lifecycle stage:
  • Selection: risk screening, due diligence, and onboarding requirements.
  • Contracting: risk‑based contractual controls, clauses, and addenda.
  • Ongoing Management: monitoring, issue management, periodic reassessments.
  • Exit: transition planning, data return/destruction, and service continuity considerations.
• Operationalize governance standards, policies, and procedures, managing recurring governance activities such as supplier reviews, risk attestations, control validations, remediation tracking, and issue escalation.
• Enhance existing governance and operational metrics and report to key stakeholders.
• Identify, assess, and drive resolution of supplier risk issues in collaboration with Executive Business Owners, Supplier Relationship Managers, and other stakeholders.

• Bachelor’s degree in Business, Risk Management, Information Systems, Finance, or a related field (or equivalent experience).
• 5–8+ years of experience in supplier management, third‑party risk management, sourcing, compliance, information security, or operational risk.
• Strong program management, organizational, and stakeholder engagement skills.
• Ability to synthesize complex risk and compliance requirements into practical, scalable processes.
• Excellent written and verbal communication skills, including executive‑level reporting.
• Ability to balance risk rigor with business enablement.
• Strong collaboration and influence skills without direct authority.
• High attention to detail with the ability to see systemic patterns and enterprise impacts.
• Comfort operating in environments with evolving regulatory and risk expectations.
• Experience supporting or building Third‑Party or Supplier Risk Management programs.
• Familiarity with relevant regulatory expectations such as third‑party risk management guidance and data protection regulations, preferably in the insurance, financial services, or banking industry.
• Experience partnering with Legal and Procurement on risk‑based contracting and supplier governance.
• Professional certifications such as CISA, CRISC, CISSP, CFA, PMP, or similar.
• Experience with supplier lifecycle management, GRC, or third‑party risk platforms.
• Demonstrated knowledge of supplier risk domains such as Information Security and Data Privacy, Regulatory and Compliance Risk, Operational and Resilience Risk, Financial and Concentration Risk.

Base Salary: $80,200 – $158,200 (P3 level)

Incentive Plan:
Performance‑based target earning opportunity of 10%.

• Medical, Dental, Vision coverage starting your first day.
• Flexible Spending Account options.
• Generous Choice Time Off: first full year, 12 paid holidays, 40 hours of volunteer time off.
• 401(k) plan with matching contributions.
• Tuition Reimbursement and Student Loan Repayment.
• Paid Family Leave, Child Care Subsidy Program.
• Employee Benefits & Wellness support, including gym membership reimbursement and Employee Assistance Program resources.
• Caregiver and Mental Health Support Service.

We are a proud equal‑opportunity employer and all hiring decisions are based on merit, qualifications, and business need. We do not discriminate based on race, religion, color, national origin, gender (including pregnancy), sexual orientation, gender identity, gender expression, age, veteran status, or disability status.