Third Party Risk Manager (Contract, 15 months — strong likelihood of extension)
Remote (California)
About the Role
A growing information security organization is building out its third-party risk management program as part of an expanding Governance, Risk & Compliance function. Reporting to the CISO, you'll help design and run the program from the ground up — leading risk due diligence, driving remediation, and giving leadership clear visibility into third-party risk.
What You'll Do
• Help establish a formal third-party risk management (TPRM) program
• Develop and execute TPRM processes in partnership with Information Security, Enterprise Risk, and Business Unit teams
• Conduct risk due diligence across the full third-party lifecycle
• Identify and track compensating controls, partnering with business teams on implementation
• Build dashboards and reporting to keep leadership informed on third-party risk status
What You'll Bring
• 3-5 years of progressive experience in third-party/supply chain risk management, including InfoSec risk assessments and driving mitigation
• Strong knowledge of InfoSec fundamentals and compliance frameworks such as SOC 2, ISO 27001, and NIST
• Track record partnering across business units, from ICs to senior leadership
• Excellent communication skills — able to translate technical risk into business terms