AX-26 Risk Manager

Oceans Code Experts; Colombia; Presencial; COP 140.000.000 - 230.000.000; Jornada completa

Descripción de la vacante

Oceans Code Experts is seeking a Senior Risk Manager to lead enterprise-scale TPRM programs across regions. The role emphasizes governance, supplier risk, and integration with cybersecurity.

You will use OneTrust and BitSight, mentor teams, and work with Procurement, Legal, Privacy, and Audit to improve risk posture. Advanced English required.

This is a full-time consulting role with up to 40 hours weekly and flexible core hours.

Formación

• 10+ years in TPRM, supply chain risk, or GRC roles.
• Advanced English proficiency, written and spoken.
• Strong expertise in TPRM operations, due diligence, and compliance.
• Hands-on with OneTrust TPRM and BitSight or similar tools.
• Demonstrated leadership and change-management experience.
• Knowledge of ISO 27001, NIST, SOC 2, PCI DSS.
• Experience collaborating with cross-functional teams and presenting to leadership.

Responsabilidades

• Lead enterprise-scale TPRM programs across regions and business units.
• Conduct supplier risk assessments, due diligence, risk reporting, and incident management.
• Utilize OneTrust TPRM for methodologies, workflows, and optimization.
• Integrate BitSight security posture insights into risk decisions.
• Manage teams, drive organizational change, and resolve stakeholder issues.
• Collaborate with Procurement, Legal, Privacy, Internal Audit, and ERM teams.
• Present complex risk concepts to senior leadership, boards, and auditors.
• Implement automation and AI-driven workflows within TPRM or cybersecurity.

Conocimientos

TPRM leadership

Risk assessment

Regulatory compliance

Executive communication

Herramientas

OneTrust TPRM

BitSight

Copilot AI (Agentic)

Descripción del empleo

Oceans Code Experts is looking for a Risk Manager (AX-26) to join our team. This role involves managing Third-Party Risk Management (TPRM), Supply Chain Risk Management, Information Security Risk, Governance, Risk & Compliance (GRC), or related cybersecurity functions. We are seeking an individual with 10+ years of experience, advanced English proficiency, and a strong background in enterprise-scale TPRM programs.

Job Responsibilities

• Lead enterprise-scale TPRM programs, operations, and governance frameworks across multiple regions and business units.
• Conduct supplier risk assessments, due diligence, risk reporting, incident management, and ensure regulatory compliance requirements are met.
• Utilize tools such as OneTrust TPRM for third-party risk assessment methodologies, workflow configuration, and process optimization.
• Integrate security posture insights from continuous monitoring platforms like BitSight into risk management decisions.
• Manage teams, drive organizational change, resolve complex stakeholder issues, and influence executive-level decisions.
• Collaborate with Procurement, Legal, Privacy, Internal Audit, and Enterprise Risk Management teams.
• Present complex risk concepts to senior leadership, boards, and auditors effectively.
• Implement automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.

Job Requirements

• Minimum of 10 years of experience in TPRM, Supply Chain Risk Management, Information Security Risk, GRC, or related cybersecurity functions.
• Advanced English proficiency, both written and spoken.
• Strong expertise in TPRM operations, supplier risk assessments, due diligence, and regulatory compliance.
• Hands-on experience with OneTrust TPRM and continuous monitoring platforms like BitSight.
• Proven leadership experience in managing teams and driving organizational change.
• Knowledge of enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, and PCI DSS.
• Experience collaborating with cross-functional teams and presenting to senior leadership.
• Familiarity with AI tools and workflow automation platforms is preferred.

Nice to Have

• Experience developing automation using Copilot or other Agentic AI frameworks.
• Experience leading TPRM activities during mergers, acquisitions, divestitures, and integration programs.
• Knowledge of emerging risks including AI, cloud security, geopolitical risk, privacy, and evolving regulatory requirements.
• Experience implementing automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.
• Familiarity with enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, and privacy regulations.
• Strong executive communication skills with a proven ability to present complex risk concepts to senior leadership, boards, and auditors.

Position Type and Expected Hours of Work

• Full-time consulting position.
• Up to 40 hours per week with flexible core hours.