Manager, Third-Party Risk Management - FedRAMP

Job Requisition  #

26WD95022

Autodesk’s Third-Party Risk Management (TPRM) team plays a vital role in identifying, assessing the technical security risks of third‑party vendors and monitoring Autodesk’s overall third‑party risk posture. TPRM partners with ESE (IT), Implementation Engineering, Information Security Engineering, SaaS Security Engineering, Network Security Engineering, Procurement, Purchasing, Legal, Security, Privacy, the AI team, Vendor Management, and other group verticals to reduce security risks.

A key priority is enabling our business leaders through education to address and mitigate technical third‑party security risks.

You will oversee the entire third‑party risk lifecycle, conducting robust technical due diligence during onboarding, performing comprehensive re‑assessments, and managing off‑boarding procedures. You will evaluate emerging risks introduced by technologies such as Artificial Intelligence (AI), Large Language Models (LLMs), data lakes, and data warehouses. You must collaborate across teams and influence decision‑makers to mitigate risks while enabling secure business growth.

This is an exciting opportunity to drive innovation through developing risk quantification, utilizing cutting‑edge tooling, and forging strategic partnerships within Autodesk’s vast and diverse global third‑party ecosystem. This role will act as a people leader, program leader, and senior individual contributor all in one, requiring the ability to balance all three hats.

In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.

• Establish team goals and work with direct reports on strategies for executing, measuring progress, and sharing results
• Assess the technical security risks of third‑party vendors during initial due diligence, integration, and re‑assessment, focusing on technical trust risks (security, data privacy, resilience, trusted AI, and compliance risks)
• Operate and improve Autodesk’s third‑party risk management systems, including leveraging tools like One Trust for workflows and developing models for risk quantification
• Partner with Legal, Trust, and business owners to embed comprehensive Trust (security, privacy, resilience, trusted AI) requirements directly into contracts, ensuring alignment with policies and compliance frameworks (e.g., GDPR, CCPA, SOC2, NIST, etc.)
• Liaise with high‑risk vendors to understand their security posture, advocate for aligned improvements, and provide advisory on identified risks
• Develop and maintain processes that enhance the efficiency and scalability of third‑party evaluations, continuous monitoring, and off‑boarding procedures
• Maintain a comprehensive third‑party inventory and risk register, presenting findings, trends, and action plans to senior leadership
• Work with internal teams to investigate and respond to third‑party related security incidents, defining escalation procedures and remediation requirements
• Manage all employees on the team including staffing and scheduling, compensation, performance management, training, and development
• Attract, retain, and motivate the team to achieve management business objectives; demonstrate leadership skills to train, develop, and coach others in the execution of the program
• Demonstrate critical thinking to analyze complex workflows and big‑picture themes, making decisions and solving problems without requiring ongoing direction setting
• Problem‑solve and identify solutions to third‑party risks that are appropriate based on business context and risk materiality
• Be passionate about rapid value creation through quick wins and long‑term balanced value creation
• Be a strong change manager with the tenacity to follow through to closure
• Communicate effectively, painting exciting visuals for overall program designs and operating models to influence partners and leadership

• 7+ years of progressive experience in performing technical third‑party security reviews or as a…