Risk Management Specialist

In this role, you will lead the ongoing evolution of the organization's Third-Party Risk Management program, ensuring alignment with business objectives, vendor management strategies, and regulatory expectations. You will oversee the end-to-end vendor risk lifecycle, including onboarding, inherent risk tiering, security due diligence, continuous monitoring, remediation tracking, and offboarding activities. Working closely with senior leadership, you will help define the strategic roadmap for TPRM and GRC platforms while driving configuration, optimization, and adoption of solutions such as ServiceNow GRC, Archer, or MetricStream. You will assess and prioritize vendor-related cyber risks, establish mitigation strategies, support risk acceptance decisions, and provide executive-level reporting on the organization's third-party risk posture. Additionally, you will develop and maintain policies, standards, and procedures, support audits and regulatory reviews, train stakeholders on risk management requirements, partner cross-functionally with Procurement, Legal, Privacy, and business teams, and serve as the escalation point for high-risk or non-compliant vendors. Throughout the role, you will identify opportunities for automation and process improvement to increase efficiency, scalability, and overall risk visibility across the enterprise. Must-haves: 5-7+ years of experience in Information Security, Information Technology, Risk Management, Audit, or a related discipline. 5-7+ years of experience leading projects, programs, or teams. Proven experience managing Third-Party Risk Management (TPRM) programs across the full vendor lifecycle, including onboarding, risk assessments, continuous monitoring, and offboarding. Strong understanding of cyber risk management, threat modeling, risk assessment methodologies, and risk mitigation strategies. Experience developing and enhancing TPRM frameworks, including risk scoring models, assessment methodologies, evidence review processes, and control validation procedures. Hands-on experience with GRC platforms such as ServiceNow GRC, RSA Archer, MetricStream, or similar solutions. Experience configuring and optimizing TPRM workflows, including vendor intake, assessment management, automated risk scoring, remediation tracking, and reporting. Strong knowledge of industry security frameworks and standards, including NIST CSF and ISO 27001. Experience partnering with Procurement, Legal, Privacy, and business stakeholders to integrate security and risk requirements into vendor management processes. Experience supporting audits, regulatory assessments, and risk governance reviews as a subject matter expert. Pluses: Previous leadership experience in a Lead, Manager, or similar role within Information Security or Risk Management. Experience developing or enhancing enterprise GRC platforms and workflows. Expertise identifying and implementing automation opportunities across risk assessment, onboarding, reporting, and compliance processes. Experience creating executive dashboards and reporting focused on vendor risk exposure, concentration risk, remediation metrics, and SLA performance. Experience supporting large-scale TPRM transformations or enterprise risk modernization initiatives. #J-18808-Ljbffr