Third Party Risk Management Lead

We are seeking an experienced Lead of Third-Party Risk Management (TPRM) with experience in enterprise risk management vendor governance and cybersecurity risk to lead our global TPRM this leadership role you will define and execute the strategic vision for managing risks associated with third-party vendors suppliers contractors and strategic partners. You will lead a high-performing team establish enterprise-wide risk frameworks interface with regulators and executive board members and integrate advanced AI/automation tools to scale vendor risk oversight across the enterprise

• Build scale and own the end-to-end global TPRM Strategy andGovernance Framework aligned with enterprise risk appetite.
• Present regular risk intelligence dashboards and quarterly updates to the Executive Leadership Team.
• Establish policy standards risk security scoring methodologies and continuous monitoring controls across all operational cybersecurity financial legal and compliance
• Partner closely with Procurement Legal Cybersecurity Privacy Compliance Architecture review board IT Business Partner Incident Security and Business Unit Leaders to enforce vendor risk controls during onboarding contracting and offboarding lifecycle stages.
• Embed risk clauses into contracts (audit rights SOC 2 / ISO requirements SLA penalties incident notification windows).
• Manage mentor and build a team of risk analysts assessors and externalthird-party audit partners.
• Oversee high-risk vendor assessments Fourth-Party (Nth-party) riskmapping and concentration risk analyses.
• Direct response strategies for critical third-party security incidents (e.g. zero-day exploits supply-chain breaches major vendor outages).
• Drive the maturity and optimization of Enterprise GRC / TPRM platforms ( Levelpath Ivalua. Security Scorecard (SSC) & 6 Clicks etc).
• Leverage AI-assisted risk scoring automated due diligence workflows andcontinuous monitoring capabilities (e.g. Security Scorecard to streamlineoperations at scale.
• Maintain compliance with global regulatory standards (NIST ISO27001SOC1 & SOC2).
• Serve as the primary point of contact for external regulatory examinations andinternal audit reviews of the TPRM framework.

• Risk Governance &
• Strategy Regulatory &
  Compliance
• Vendor Operations
• Automation &
• AI Integration
• Incident &
• CrisisLeadership
• Team Leadership
• SOC reports
• ISO27K
• Data privacy
• SecurityArchitecture

Preferable Certification(s):
o Certified Third Party Risk Professional (CTPRP)
o Certified in Risk and Information Systems Control (CRISC)
o Certified Information Systems Auditor (CISA) / Security Manager(CISM)
o Certified Information Systems Security Professional (CISSP)

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g. data entry using a computer mouse using a calculator etc.) are frequently required.

Required expereince is 14years.

• Bachelors degree inrelated fieldor consideration of an equivalent combination of education and experience.

• Educational Requirements may vary by Geography

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.