- 10–12 years of professional experience in Third-Party Risk Management, IT Risk, InfoSec, Audit, or related GRC functions.
- In-depth understanding of third-party risk domains, including cybersecurity, data privacy, business continuity, and compliance.
- Experience developing or managing TPRM frameworks and governance structures across global enterprises.
- Hands-on experience with TPRM tools such as ServiceNow GRC, Archer, OneTrust, Prevalent, or ProcessUnity.
- Strong knowledge of risk and control frameworks including NIST, ISO 27001, SIG, SOC 2, and GDPR.
- Proven ability to assess and report on third-party risk posture, remediation plans, and contract compliance.
- Excellent written and verbal communication skills with ability to influence technical and non-technical audiences.
Preferred Qualifications:
- Relevant certifications such as CISA, CRISC, CISSP, CTPRA, CTPRP, or ISO 27001 Lead Auditor.
- Experience in regulated industries such as financial services, healthcare, or critical infrastructure.
- Familiarity with ESG, ethical sourcing, or operational resilience components of third-party risk.
- Experience coordinating with internal audit, legal, privacy, and security teams on vendor assessments and remediation.
Key Competencies:
- Strong leadership and stakeholder engagement skills.
- Analytical mind-set with attention to detail and risk prioritization.
- Strategic thinker with ability to scale and operationalize TPRM programs.
- Comfortable managing multiple work streams and vendor relationships.
Excellent presentation and reporting capabilities for senior leadership
