Manager, Third Party Risk Management

🕒 July 22

🇺🇸 United States – Remote

💵 $125k - $180k / year

⏰ Full Time

🟠 Senior

🔴 Lead

🔒 Insurance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CrowdStrike

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

📋 Description

• Lead, mentor, and develop a team of 4 TPRM professionals, fostering a culture of accountability, continuous learning, and operational excellence ​ • Set clear performance expectations, conduct regular 1:1s, and support career development for each team member • Serve as an escalation point for complex vendor risk issues and assessments. • Oversee end-to-end third-party risk assessments including inherent risk tiering, due diligence, control evaluations, and residual risk determinations • Manage the full vendor risk lifecycle including onboarding, periodic reassessment, and offboarding, ensuring consistent application of TPRM standards. • Partner with Procurement, Legal, IT, Security, and Business stakeholders to embed risk considerations into the vendor engagement process. • Evaluate vendor security posture, compliance certifications (SOC 2, ISO 27001, etc.), and contractual obligations. • Creating and enhancing a cybersecurity vendor risk management program, including the identification, evaluation and mitigation of risks across the organization. • Conducting third party controls evaluations and audits. • Performing other duties within the scope of governance, risk and compliance • Working across organizations to help align organizations with shared third party compliance goals and objectives. • Coordinating with IT and business units to implement effective cybersecurity measures and integrate security practices into business processes • Collaborate with cross-functional teams, including procurement, legal, and IT, to ensure comprehensive vendor risk management. • Lead the implementation of process improvements and efficiencies identified through a recent kaizen event, driving measurable outcomes. • Develop and expand automation capabilities within ServiceNow TPRM to reduce manual effort and increase assessment throughput. • Identify and implement AI-driven capabilities to enhance risk scoring, vendor monitoring, and workflow efficiency. • Define and track KPIs and metrics to demonstrate program maturity and effectiveness to senior leadership. • Serve as a functional owner and subject matter expert for ServiceNow as the TPRM platform of record. • Partner with GRC tooling and IT teams to configure, optimize, and expand ServiceNow workflows supporting TPRM operations. • Evaluate emerging technologies and vendor risk intelligence platforms to enhance the program. • Develop and maintain TPRM policies, standards, and procedures in alignment with industry frameworks (NIST, ISO 27001, SOC 2, FAIR, etc.). • Prepare and present risk reporting and program status updates to senior leadership and key stakeholders. • Support internal and external audit activities related to third-party risk.

🎯 Requirements

• 10+ years of experience in Third Party Risk Management, GRC, information security risk, or related controls disciplines. • 3+ years of people management experience, with demonstrated ability to lead and develop teams. • Deep expertise in vendor risk assessment methodologies, control frameworks, and risk lifecycle management. • Hands-on experience with ServiceNow Third Party Risk Management (TPRM) module. • Demonstrated experience driving process improvement, automation, or operational efficiency initiatives within a risk or compliance program. • Strong understanding of security and compliance frameworks including NIST CSF, ISO 27001, SOC 2, NIST 800-53, and/or SIG. • Experience with or strong interest in applying AI/ML tools to GRC or risk management workflows. • Excellent communication and stakeholder management skills — able to translate technical risk concepts for business audiences. • Ability to operate effectively in a fast-paced, high-growth environment. • Proven experience working across teams and global regions to achieve company objectives and review goals. • Ability to build rapport and maintain relationships across a multitude of functions within the company, with external vendors, and with governmental teams. • Program and project management experience in scoping, work break-down, critical path analysis, resourcing, managing time and cost estimates, project risks, and quality. • Ability to think strategically about risks and tie those risks to tactical organizational activities.

🏖️ Benefits

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe