IT Security Manager

Job Title: Senior Manager, Third-Party Cyber Risk & Audit (TPCRM) Role Overview We are seeking a Senior Manager of Third-Party Cyber Risk & Audit to design, mature, and lead our vendor risk management strategy. As global digital supply chains become more complex, the integrity of our partners is a critical component of our security posture. You will be the primary liaison between our organization and our suppliers, ensuring that every third-party relationship is assessed, monitored, and audited to meet our rigorous information security and compliance standards. This is a strategic leadership role. You will not only execute assessments but also define the "roadmap" for how our organization matures its risk oversight, ensuring we stay ahead of emerging threats and evolving global data protection regulations. Key Responsibilities Strategy, Governance & Security

• TPCRM Strategy: Develop and maintain security standards, documentation, and metrics for third-party engagements. Define the "security requirement" profile for suppliers across the vendor landscape.
• Continuous Monitoring: Select and deploy tools and techniques to monitor third-party security risks. Evaluate security assurance statements (e.g., SOC 1/2) and ensure high-risk vendors are managed according to the residual risk appetite.
• Program Maturation: Build and deploy a "cyber risk audit as a service" capability. Define audit priorities and execute a 1-to-3-year roadmap that integrates security requirements into Procurement, Legal, and Compliance workflows.

Audit & Stakeholder Leadership

• Audit Lifecycle: Build the framework for regular third-party audits. Execute the audit calendar, manage findings, and integrate results into executive-level dashboards.
• Cross-Functional Influence: Collaborate with Procurement, Legal, and Privacy teams to align vendor security requirements with enterprise-wide risk management goals.
• Business Partnering: Act as an advisor to internal leadership. Communicate risk status clearly, facilitating "risk-based" decisions that protect the organization without stifling operational speed.

Qualifications & Requirements Minimum Qualifications

• Education: Bachelor's degree in Computer Science, MIS, or a related field.
• Experience Baseline: Minimum of five (5) years of experience specifically in TPCRM, information security, and risk management.
• Certification: Must hold at least one professional certification: CISA, CRISC, CISM, or CISSP.
• Framework Mastery: Deep experience working with security/risk frameworks (ISO 27001, NIST, GDPR, SOC 1/2).
• Tooling: Hands-on experience with GRC platforms (e.g., ServiceNow, Archer, MetricStream, Vanta, or similar).

Preferred Attributes

• Proven success in driving a "security roadmap" for large-scale, multi-national organizations.
• Strong business acumen: The ability to translate "technical security findings" into "business risk implications" for non-technical stakeholders.
• Exceptional soft skills, including facilitation, negotiation, and the ability to influence leaders across virtual, multi-national teams.

Equal Opportunity Employer / Disabled / Protected Veterans The Know Your Rights poster is available here: The pay transparency policy is available here: For temporary assignments lasting 13 weeks or longer, AllSTEM Connections is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required. We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team. AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program. We also consider for employment qualified applicants regardless of criminal histories, consistent with legal requirements, including, if applicable, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records, including, if applicable, the San Francisco Fair Chance Ordinance. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additional Skills (none specified) AllSTEM Representative Contact Info Account Executive: Nichols Branch Phone: View phone number on click.appcast.io Location: Ontario, CA AllSTEM Connections