Manager, Third-Party Risk Management

A company is looking for a Manager of Third-Party Risk Management - FedRAMP.

Key Responsibilities

Oversee the third-party risk lifecycle, including technical due diligence, re-assessments, and off-boarding procedures

Collaborate with stakeholders to embed security and compliance requirements into vendor contracts

Develop and maintain processes for third-party evaluations and continuous monitoring

Required Qualifications

7+ years of experience in technical third-party security reviews or risk assessment roles

3+ years of leadership experience in a remote or hybrid environment

Professional certifications such as CISSP, CCSP, or CISM

Hands-on experience with TPRM tools like OneTrust or ServiceNOW

Familiarity with security concepts including IAM, APIs, and vulnerabilities