Senior Vendor Risk, Audit & Contract Manager

Job Description

Job Title: Senior Vendor Risk, Audit & Contract Manager (Hybrid)

\n

Location: Trenton, NJ

\n

Duration: 6 months+

\n

Interview Type: iLinc Web Cam Interview Only

\n

\n

Job Description:

\n

We are seeking a Senior Vendor & Contract Manager to join our client's team in Trenton, NJ for a 6-month engagement.

\n

The ideal candidate will bring hands-on experience with IT compliance, third-party risk management (TPRM), and audit governance, Track record authoring and operationalizing enterprise IT security, governance and Presenting risk metrics, compliance status.

\n

\n

Key Responsibilities:

\n

Core Responsibilities

\n

\n
• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
\n
• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.
\n
• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
\n
• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.
\n

\n

\n

Required Qualifications:

\n

\n
• 8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience within large-scale enterprise environments.
\n
• Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.
\n
• Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
\n
• Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.
\n

\n

\n

Position Requirements:

\n

\n
• Hybrid position based in Trenton, NJ.
\n
• Candidate Must Be Local to New Jersey - (This is a hybrid position - 3 days on-site, and 2 days remote.)
\n

\n

\n

Skill Matrix:

\n

\n
• IT Compliance, ITGC & Audit Governance in Enterprise Environments (8+ Years): Required
\n
• Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies (7+ Years): Required
\n
• Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans (7+ Years): Required
\n
• Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security (7+ Years): Required
\n
• Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification (7+ Years): Preferred
\n
• Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security (7+ Years): Preferred
\n
• Bachelor’s Degree minimum (0+ Years): Required
\n
• Local to Trenton, NJ: Required
\n

\n

\n

About GSK Solutions Inc:

\n

GSK Solutions Inc. is a leading IT services company specializing in consulting solutions and staff augmentation. We deliver high-quality, on-time, and cost-effective solutions, consistently exceeding client expectations with superior execution.

\n

\n

#GSKIT