Senior Manager, Third Party Risk

🔥 16 hours ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Baylor Genetics

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1978

🏥 Healthcare

💼 Consulting

🍽️ Food & Beverage

Healthcare • Consulting • Food & Beverage

Baylor Genetics is a clinical genomics and precision diagnostics laboratory affiliated with Baylor College of Medicine that provides comprehensive genetic testing and interpretation services. The company offers whole genome and whole exome sequencing, chromosomal microarray analysis, mitochondrial testing, pharmacogenomics, and specialized assays, along with genetic counseling, provider support, and insurance/payment resources. Baylor Genetics supports healthcare providers, researchers, and families with AI-enhanced interpretation, multimodal data integration, and end-to-end clinical and laboratory services.

📋 Description

• Build, lead, and mature Baylor Genetics’ enterprise Third-Party Risk Management program • Manage the full vendor lifecycle, including intake, risk tiering, security and privacy assessment, onboarding, ongoing monitoring, and offboarding • Lead security and cybersecurity reviews for medium- and high-risk vendors • Establish vendor onboarding, continuous monitoring, and reassessment processes using the SIG questionnaire • Draft SOPs, policies, and documentation governing vendor intake, assessment, and monitoring • Conduct internal and external vendor audits, including high-risk upstream vendors with access to PHI, PII, and AI • Categorize vendors by criticality and maintain a vendor risk heat map and single source of truth • Operate ongoing vendor monitoring, track remediation, and coordinate BAAs/DPAs, DPIAs/TIAs, and sub-processor requirements • Develop and manage the quarterly User Access Review program across in-scope applications, including employee, contractor, temporary staff, vendor, administrator, and privileged accounts • Enforce least-privilege access, collect attestations, and produce audit evidence • Drive audit readiness and evidence collection across ISO 27001, ISO 27701, ISO 42001, and HITRUST • Produce leadership reports, KPIs, and risk metrics on vendor risk posture, remediation, and audit progress • Partner with Security, Privacy, Compliance, Procurement, Legal, and application teams • Review application-security evidence, including static code analysis results such as SonarQube/SAST • Contribute to a culture of integrity and service and perform other assigned duties

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or a related field, or an equivalent combination of education and experience • Minimum of 6–8 years of experience in information security, risk, or compliance, including experience creating and running upstream and downstream vendor management programs • Hands-on audit experience with ISO 27001, ISO 27701, and ISO 42001 • Demonstrated HITRUST experience, including assessment, readiness, and/or certification support • Experience developing and managing recurring User Access Review programs and least-privilege access controls • Working knowledge of vendor risk assessment methodologies, such as SIG, and risk scoring/tiering • Strong understanding of HIPAA, GDPR, and security requirements for PHI and sensitive PII • Relevant certifications such as CTPRP, CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor/Implementer preferred • Experience with GRC platforms, such as TrustArc, and vendor risk tooling preferred • Prior experience in a healthcare, clinical laboratory, or other regulated HIPAA/PHI environment preferred • People- or program-management experience leading assessments and coordinating cross-functional stakeholders preferred • Strong analytical and risk-based judgment with meticulous attention to detail • Excellent written and verbal communication skills, with ability to convey complex risk to technical and executive audiences • Program- and project-management skills, managing multiple concurrent assessments and deadlines • Collaborative influence across Security, Privacy, Compliance, Procurement, and business units • Ability to work remotely and travel occasionally to headquarters, meetings, vendor audits, or conferences

🏖️ Benefits

• Remote work arrangement • Occasional travel to headquarters in Houston, Texas • Occasional travel for meetings, vendor audits, or conferences