Supplier Program manager

Supplier Management Program Manager

Location:

Richmond/Lynchburg, VA / Stamford, CT

This role is not eligible for employment visa sponsorship.

The Supplier Program Manager is responsible for strengthening and operationalizing supplier risk management and governance capabilities across the full supplier lifecycle—selection, onboarding, contracting, ongoing management, and exit. This role reports to the Supplier Program Management Leader and cross‑functional stakeholders (Sourcing, Legal, Information Security, Privacy, Risk, Compliance, IT, and Business Owners) to ensure suppliers are assessed, governed, and managed in a manner consistent with the company’s risk appetite, regulatory obligations, and business objectives.

• Support the design, implementation, and continuous improvement of the enterprise supplier risk management framework across the supplier lifecycle.
• Execute and enhance risk‑based supplier assessments, including data security, privacy, operational resilience, regulatory compliance, financial stability, and materiality considerations.
• Ensure risk requirements are appropriately embedded at each lifecycle stage:
  • Selection: risk screening, due diligence, and onboarding requirements.
  • Contracting: risk‑based contractual controls, clauses, and addenda.
  • Ongoing Management: monitoring, issue management, periodic reassessments.
  • Exit: transition planning, data return/destruction, and service continuity considerations.
• Operationalize governance standards, policies, and procedures.
• Manage and operationalize recurring governance activities such as supplier reviews, risk attestations, control validations, remediation tracking, and issue escalation, ensuring consistent application across suppliers.
• Enhance existing governance and operational metrics and report to key stakeholders.
• Identify, elevate, and drive resolution of supplier risk issues in collaboration with Executive Business Owners (EBOs) and Supplier Relationship Managers (SRMs) and other stakeholders.

• Bachelor’s degree in Business, Risk Management, Information Systems, Finance, or a related field (or equivalent experience).
• 5–8+ years of experience in one or more of the following: supplier management, third‑party risk management, sourcing, compliance, information security, or operational risk.
• Strong program management, organizational, and stakeholder engagement skills.
• Ability to synthesize complex risk and compliance requirements into practical, scalable processes.
• Excellent written and verbal communication skills, including executive‑level reporting.
• Ability to balance risk rigor with business enablement.
• Strong collaboration and influence skills without direct authority.
• High attention to detail with the ability to see systemic patterns and enterprise impacts.
• Comfort operating in environments with evolving regulatory and risk expectations.
• Experience supporting or building Third‑Party or Supplier Risk Management programs.
• Familiarity with relevant regulatory expectations (e.g., third‑party risk management guidance, data protection regulations) preferably in the insurance, financial services, or banking industry.
• Experience partnering with Legal and Procurement on risk‑based contracting and supplier governance.
• Professional certifications such as CISA, CRISC, CISSP, CFA, PMP, or similar.
• Experience with supplier lifecycle management, GRC, or third‑party risk platforms.
• Demonstrated knowledge of supplier risk domains such as:
  • Information Security and Data Privacy
  • Regulatory and Compliance Risk
  • Operational and Resilience Risk
  • Financial and Concentration Risk

Within our company the base salary pay range for the job level P3 starts at a minimum rate of $80,200 up to the maximum of $158,200.…