Cloud TPRM Tech Program Manager

CoreWeave; Sunnyvale (CA); On-site; USD 157,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company-paid Life Insurance

Equity awards

401(k) with generous match

Flexible PTO

Tuition Reimbursement

ESPP

Job summary

CoreWeave is seeking a TPM to lead third party risk management within the Security Trust & Assurance group. You will drive risk assessments, governance, and remediation across vendors and contracts in a fast-paced cloud environment.

The role emphasizes collaboration with engineering, procurement, IT, and Legal to mature the TPRM program and ensure security controls align with company objectives and regulatory expectations.

Qualifications

• 2+ years of hands-on Third Party Risk Management experience in cloud or fast-paced environments.
• Bachelor’s degree or equivalent experience in information security, CS, or related field.
• Industry certifications such as CISA, CRISC, CISSP, or CTPRP are preferred.

Responsibilities

• Contribute to the TPRM strategy and roadmap aligned with security and business goals.
• Oversee third party security risk assessments and contract requirements.
• Track findings to closure with remediation timelines.
• Perform vendor reassessments per tier-based cadence.
• Maintain the vendor inventory and risk register in the TPRM platform.
• Refine assessment questionnaires, workflows, and program docs.
• Communicate with engineers, procurement, IT, and Legal across audiences.

Skills

TPRM program management

Security risk assessments

Vendor risk governance

Cross-functional coordination

Education

Bachelor’s degree in Information Security, Computer Science, or related field

Security certifications (CISA, CRISC, CISSP, or CTPRP)

Job description

CoreWeave is seeking a TPM to lead third party risk management within the Security Trust & Assurance group. You will drive risk assessments, governance, and remediation across vendors and contracts in a fast-paced cloud environment.

The role emphasizes collaboration with engineering, procurement, IT, and Legal to mature the TPRM program and ensure security controls align with company objectives and regulatory expectations.