Third Party Risk Manager

STRS Ohio, STRS

The State Teachers Retirement System of Ohio (STRS Ohio) is seeking a Third Party Risk Manager to join the Executive/Business Operations and Security team.

Established in 1920 and serving Ohio's educators, STRS Ohio is one of the nation's largest retirement systems, serving nearly 550,000 active, inactive, and retired public‑school teachers, and university faculty members, managing approximately $96.3 billion as of June 30, 2025, in assets and paying more than $7 billion in benefits annually.

STRS Ohio provides a competitive pay, and a comprehensive benefits package including on‑site parking, educational assistance, subsidized medical insurance, fully paid dental and life insurance, vacation and sick leave, retirement benefits and on‑site fitness center. At STRS Ohio, you can experience rewarding work in a professional, business casual work environment. We welcome, celebrate, and promote respect for everyone. We are continually seeking bright and talented individuals to join our team.

$67,962 - $81,555

8:00am-5:00pm Monday through Friday (Onsite)

Under the direction of the supervisor, ITS Systems Security, lead the Third-Party Risk Management (TPRM) program for State Teachers Retirement System of Ohio (STRS Ohio). Oversee due diligence, assessment, monitoring and governance activity for third‑party relationships to minimize risk exposure and risk impacts to technology and business.

• Develop, implement and continuously improve the organization’s third‑party risk management strategy, policy and procedures ensuring effective oversight of vendor relationships.
• Lead the development of pre‑contract and self‑attestation questionnaires to be completed by prospective and current STRS Ohio vendors. Monitor questionnaire completion, coordinating with vendors and internal stakeholders. Tailor due diligence requirements and questionnaire content based on the vendor’s risk profile, criticality and service type.
• Review and assess vendor contracts to ensure appropriate risk mitigation, including information security, artificial intelligence (AI)/machine learning use and software supply chain protections.
• Facilitate risk assessments to identify, evaluate and prioritize third‑party risks, including subcontractor dependency, operational resilience and emerging threats.
• Assess third‑party relationships for geopolitical, sanctions, and ownership‑structure risk in coordination with Sourcing and Vendor Management and Legal/Compliance.
• Monitor applicable regulatory, cybersecurity and industry developments and recommend enhancements to the TPRM program to address evolving risks and best practices.

The above list of duties in intended to describe the general nature and level of work performed by persons assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the persons so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct and control the work of associates under supervision.

• Bachelor's degree in computer science, business administration, risk management or related field required.
• Three or more years' information technology and third‑party risk management experience required.
• Experience with third party risk management (TPRM) software platforms and risk data analysis/reporting tools preferred.
• Knowledge of and experience with the following:

State Teachers Retirement System of Ohio (STRS) is an Equal Employment Opportunity Employer and prohibits discrimination and harassment of applicants or employees on the basis of race, color, religion, gender, gender identity or expression,…