Risk Management (Third Party)

Auxis LLC; Bogotá ciudad; Presencial; COP 120.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

Auxis LLC seeks an experienced Third-Party Risk Management (TPRM) Manager to lead and evolve our enterprise TPRM program. This role drives TPRM strategy, operations, reporting, supplier incident management, M&A risk integration, and governance while leveraging OneTrust and BitSight capabilities for enhanced risk visibility.

The ideal candidate will employ AI-enabled solutions, mentor teams, and deliver measurable business outcomes through effective governance and executive reporting.

Formación

• 10+ years of experience in TPRM or related cybersecurity functions.
• Experience leading enterprise-scale TPRM programs across regions and business units.
• Hands-on with OneTrust TPRM and risk assessment methodologies.
• Experience with BitSight and continuous monitoring.
• Strong leadership and hiring experience.
• Familiarity with AI tools and automation in risk management.

Responsabilidades

• Lead and evolve the TPRM program aligning with regulatory and business objectives.
• Oversee due diligence, risk assessments, reassessments, and supplier risk governance.
• Develop executive and operational risk reporting with data accuracy and traceability.
• Lead M&A supplier risk integration and Day-0/30/90 objectives.
• Own supplier security incident management framework and executive reporting.
• Drive AI, automation, and innovation across TPRM processes.
• Govern OneTrust TPRM workflows, questionnaires, and platform integrations.
• Perform continuous supplier monitoring with BitSight and similar tools.

Conocimientos

TPRM leadership

OneTrust

BitSight

AI automation

Regulatory compliance

GRC frameworks

Stakeholder mgmt

Herramientas

OneTrust

BitSight

Descripción del empleo

Job Summary

We are seeking an experienced Third-Party Risk Management (TPRM) Manager to lead and evolve our enterprise TPRM program. This role will drive TPRM strategy, operations, reporting, supplier incident management, M&A risk integration, and governance initiatives while ensuring effective execution of OneTrust assessments and BitSight operations. The ideal candidate will leverage automation, AI-enabled solutions, and innovative approaches to enhance efficiency, risk visibility, and decision-making. Strong leadership, stakeholder management, team development, and hiring experience are essential to build a high-performing TPRM function and deliver measurable business outcomes.

Responsibilities

• Lead and evolve the EMEA Third-Party Risk Management (TPRM) program, aligning strategy with regulatory, business, M&A, and InfoSec Supply Chain Risk Management objectives.
• Oversee end-to-end TPRM operations, including due diligence, risk assessments, reassessments, exception management, SLA performance, and operational scalability.
• Develop and deliver executive, regulatory, and operational reporting, providing actionable risk insights and ensuring data accuracy and traceability.
• Lead TPRM integration for M&A activities, including acquisition due diligence, supplier risk assessments, onboarding into TPRM frameworks, and Day-0/30/90 integration objectives.
• Own the supplier security incident management framework, coordinating breach response, impact assessments, remediation, and executive reporting.
• Drive AI, automation, and innovation initiatives to improve efficiency, decision-making, risk visibility, and operational effectiveness across TPRM processes.
• Own and optimize OneTrust TPRM workflows, assessments, questionnaires, control mappings, and platform integrations.
• Govern continuous supplier monitoring through BitSight and similar tools, driving risk-based supplier engagement, remediation, and executive reporting.
• Define, track, and continuously improve TPRM KPIs, KRIs, maturity metrics, and performance reporting.
• Build and lead a high-performing TPRM organization through hiring, workforce planning, mentoring, coaching, succession planning, and stakeholder engagement.

Skills and Experience

Required Qualifications

• English B2+ or Higher
• 10+ years of experience in Third-Party Risk Management (TPRM), Supply Chain Risk Management, Information Security Risk, Governance, Risk & Compliance (GRC), or related cybersecurity functions.
• Demonstrated experience leading enterprise-scale TPRM programs, operations, and governance frameworks across multiple regions and business units.
• Strong expertise in supplier risk assessments, due diligence, risk reporting, incident management, and regulatory compliance requirements.
• Hands-on experience with OneTrust TPRM, third-party risk assessment methodologies, workflow configuration, and process optimization.
• Experience with continuous monitoring platforms such as BitSight and integrating security posture insights into risk management decisions.
• Proven leadership experience managing teams, driving organizational change, resolving complex stakeholder issues, and influencing executive-level decisions.
• Familiarity with AI tools, workflow automation platforms, and integrating AI into existing systems is preferred.

Preferred Qualifications

• Experience developing automation using Copilot or other Agentic AI frameworks
• Experience leading TPRM activities during mergers, acquisitions, divestitures, and integration programs.
• Knowledge of emerging risks including AI, cloud security, geopolitical risk, privacy, and evolving regulatory requirements.
• Experience implementing automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.
• Familiarity with enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, and privacy regulations.
• Experience collaborating with Procurement, Legal, Privacy, Internal Audit, and Enterprise Risk Management teams.
• Strong executive communication skills with a proven ability to present complex risk concepts to senior leadership, boards, and auditors.

Soft Skills

• Strong analytical and problem-solving skills with the ability to manage multiple priorities in a fast-paced environment.
• Experience working within multinational environments with complex IT asset landscapes.
• Attention to detail and accuracy.
• Strong problem-solving and analytical abilities.
• Ability to translate compliance requirements into technical controls.
• Commitment to continuous improvement and maturity enablement of the program.