Description

Architect end-to-end Third-Party Risk Management (TPRM) solutions, covering vendor onboarding, due diligence, continuous monitoring, and remediation.

This role is on-site.

Responsibilities

• Design and configure risk scoring models, heatmaps, and automated rating logic using platform rule engines or scripting.
• Implement complex assessment workflows with dynamic questionnaire logic, conditional branching, and automated follow-ups.
• Build and optimize vendor lifecycle processes including segmentation, tiering, approval chains, and periodic review cycles.
• Integrate external risk feeds (e.g., BitSight, SecurityScorecard) and related modules (IRM/GRC, Procurement, Security Ops) via APIs and custom connectors.
• Develop automated control testing workflows, evidence collection portals, and continuous monitoring capabilities with audit trails.

Required Skills

• 10+ years of experience in TPRM, vendor risk management, and regulatory frameworks.
• Hands-on implementation of IRM/GRC platforms such as ServiceNow IRM, Archer GRC, MetricStream, OneTrust, or LogicGate.
• Proficiency in API integrations, REST/SOAP, OAuth, and webhooks for external data ingestion.
• Technical knowledge of data modeling, table extensions, scripted business rules, and workflow engines.
• Deep understanding of risk methodologies, including inherent/residual risk, control effectiveness, and tiering models.
• Experience configuring dashboards, KPIs, KRIs, and risk scorecards with drill-down analytics.
• Familiarity with ISO 27001, SOC2, NIST, PCI-DSS, GDPR, and HIPAA compliance frameworks.
• Strong analytical ability to map control gaps and translate findings into automated risk triggers.
• Excellent communication skills for leading workshops and engaging with executive stakeholders.

Key Skills

Education

Bachelor's degree