Lead, Risk Management

Job Description
In this role, you will lead the ongoing evolution of the organization's Third-Party Risk Management program, ensuring alignment with business objectives, vendor management strategies, and regulatory expectations. You will oversee the end-to-end vendor risk lifecycle, including onboarding, inherent risk tiering, security due diligence, continuous monitoring, remediation tracking, and offboarding activities. Working closely with senior leadership, you will help define the strategic roadmap for TPRM and GRC platforms while driving configuration, optimization, and adoption of solutions such as ServiceNow GRC, Archer, or MetricStream. You will assess and prioritize vendor-related cyber risks, establish mitigation strategies, support risk acceptance decisions, and provide executive-level reporting on the organization's third-party risk posture. Additionally, you will develop and maintain policies, standards, and procedures, support audits and regulatory reviews, train stak...