Senior Vendor & Contract Manager || 1099/W2 Role

Job Description

Position: Senior Vendor & Contract Manager

\n

Location: Trenton, NJ- Hybrid

\n

Description:

\n

Complete Description:

\n

We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management across our technology ecosystem.

\n

\n

Key Responsibilities:

\n

• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.

\n

• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.

\n

• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.

\n

• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.

\n

• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.

\n

• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.

\n

• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.

\n

\n

Qualifications:

\n

•8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience within large-scale enterprise environments.

\n

•Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.

\n

•Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.

\n

•Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.

\n

\n

Skill Required / Desired Amount of Experience

\n

IT Compliance, ITGC & Audit Governance in Enterprise Environments- Required 8 Years

\n

Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies- Required 7 Years

\n

Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans- Required 7 Years

\n

Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks- Required 7 Years

\n

Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification- Highly desired 7 Years

\n

Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations- Highly desired 7 Years

\n

Bachelor’s Degree minimum- Required

\n

\n

Question 1

\n

Where is the candidate currently geographically located?

\n

\n

Question 2

\n

If the candidate resides more than 1 hour from the client site, will the candidate relocate for the position?

\n

\n

Question 3

\n

Please provide link to LinkedIn profile.