Senior Manager, Third Party Risk

🕒 Setembro 9

🤠 Texas – Remoto

🤠 Texas – Remote

⏰ Tempo Integral

🟠 Sênior

🎲 Riscos

👻 Score fantasma 10%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Baylor Genetics

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 1978

🏥 Saúde

💼 Consultoria

🍽️ Alimentos e Bebidas

Healthcare • Consulting • Food & Beverage

A Baylor Genetics é um laboratório de genômica clínica e diagnóstico de precisão afiliado ao Baylor College of Medicine, que oferece serviços abrangentes de teste genético e interpretação. A empresa oferece sequenciamento do genoma completo e do exoma completo, análise cromossômica por microarray, testes mitocondriais, farmacogenômica e ensaios especializados, juntamente com aconselhamento genético, suporte para prestadores de serviços e recursos de seguro/pagamento. A Baylor Genetics apoia prestadores de saúde, pesquisadores e famílias com interpretação aprimorada por IA, integração de dados multimodais e serviços clínicos e laboratoriais de ponta a ponta.

Descrição

• Build, lead, and mature Baylor Genetics’ enterprise Third-Party Risk Management program • Manage the full vendor lifecycle, including intake, risk tiering, security and privacy assessment, onboarding, ongoing monitoring, and offboarding • Lead security and cybersecurity reviews for medium- and high-risk vendors • Establish vendor onboarding, continuous monitoring, and reassessment processes using the SIG questionnaire • Draft SOPs, policies, and documentation governing vendor intake, assessment, and monitoring • Conduct internal and external vendor audits, including high-risk upstream vendors with access to PHI, PII, and AI • Categorize vendors by criticality and maintain a vendor risk heat map and single source of truth • Operate ongoing vendor monitoring, track remediation, and coordinate BAAs/DPAs, DPIAs/TIAs, and sub-processor requirements • Develop and manage the quarterly User Access Review program across in-scope applications, including employee, contractor, temporary staff, vendor, administrator, and privileged accounts • Enforce least-privilege access, collect attestations, and produce audit evidence • Drive audit readiness and evidence collection across ISO 27001, ISO 27701, ISO 42001, and HITRUST • Produce leadership reports, KPIs, and risk metrics on vendor risk posture, remediation, and audit progress • Partner with Security, Privacy, Compliance, Procurement, Legal, and application teams • Review application-security evidence, including static code analysis results such as SonarQube/SAST • Contribute to a culture of integrity and service and perform other assigned duties

🎯 Requisitos

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or an equivalent combination of education and experience • Minimum of 6–8 years of experience in information security, risk, or compliance, including experience creating and running upstream and downstream vendor management programs • Hands-on audit experience with ISO 27001, ISO 27701, and ISO 42001 • Demonstrated HITRUST experience, including assessment, readiness, and/or certification support • Experience developing and managing recurring User Access Review programs and least-privilege access controls • Working knowledge of vendor risk assessment methodologies, such as SIG, and risk scoring/tiering • Strong understanding of HIPAA, GDPR, and security requirements for PHI and sensitive PII • Relevant certifications such as CTPRP, CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor/Implementer preferred • Experience with GRC platforms, such as TrustArc, and vendor risk tooling preferred • Prior experience in a healthcare, clinical laboratory, or other regulated HIPAA/PHI environment preferred • People- or program-management experience leading assessments and coordinating cross-functional stakeholders preferred • Strong analytical and risk-based judgment with meticulous attention to detail • Excellent written and verbal communication skills, with ability to convey complex risk to technical and executive audiences • Program- and project-management skills, managing multiple concurrent assessments and deadlines • Collaborative influence across Security, Privacy, Compliance, Procurement, and business units • Ability to work remotely and travel occasionally to headquarters, meetings, vendor audits, or conferences

🏖️ Benefícios

• Remote work arrangement • Occasional travel to headquarters in Houston, Texas • Occasional travel for meetings, vendor audits, or conferences