Manager, Third-Party Risk Management (TPRM)
Core
Lead a global Third-Party Risk Management (TPRM) program, owning the vendor security risk lifecycle from discovery to exit, while building an AI-native function with agentic workflows.
Role type
Senior Manager, Third-Party Risk Management (TPRM)
Builds
AI-native TPRM workflows, automated assessment pipelines, and agentic systems for evidence gathering and risk decisioning.
Domain
Cybersecurity, Third-Party Risk Management (TPRM), Cloud Security, AI/ML Governance
Deliverable
production ML models
Required skills
Vendor security risk lifecycle management, complex technical vendor assessments, threat modeling, AI-native workflow design, agentic system implementation, cloud security (IAM, SaaS, BPO), security assurance (SOC 2, ISO 27001, PCI DSS), Python, SQL, low-code orchestration, stakeholder negotiation, team leadership
Preferred skills
Experience with DoorDash/Wolt/Deliveroo ecosystems, deep knowledge of AI model/data provider risks, production-scale agentic experience
Technologies
Python, SQL, low-code orchestration, SAML/OIDC, OAuth, SCIM, Cloud IAM, APIs
Responsibilities
Run day-to-day TPRM operations including due diligence, continuous monitoring, and remediation; Lead assessments of vendors connected to crown jewel systems (identity, cloud, CI/CD); Set vision and roadmap for AI-native TPRM and agentic workflows; Build and pilot agentic workflows for evidence gathering and risk assessment; Own TPRM framework for third-party AI and agentic services; Hire, coach, and manage TPRM professionals; Provide US-hours GRC coverage and escalation support; Report risk metrics and program performance to leadership.
Seniority
Senior, hands-on IC with people leadership
