Director, Enterprise Third-Party Risk Management Operations & Governance

Vertex Pharmaceuticals LLC; Boston (MA); Hybrid; USD 176,000 - 264,000; Full time

Benefits offered by this job

Annual bonus

Equity awards

Health, dental, vision benefits

Paid time off including company shut

Job summary

Vertex Pharmaceuticals LLC in Boston, MA, seeks a Director of Enterprise Third-Party Risk Management Operations & Governance to drive end-to-end TPRM execution and scalability across the enterprise.

In this role you will partner with TPRM leadership, risk SMEs, sourcing teams and MSPs to ensure governance, risk assessment, remediation, monitoring and executive reporting, while advancing automation and process improvements.

Qualifications

• Strong analytical and project management skills.
• Exceptional leadership, communication, and stakeholder management skills.
• Familiarity with third-party risk assessment tools, dashboards, and governance frameworks.
• Ability to lead cross-functional teams and drive operational excellence.
• Track record of delivering measurable outcomes through process transformation, automation, and user experience redesign.

Responsibilities

• Lead operational integration of existing and newly established TPRM processes to create a seamless end-to-end third-party risk experience.
• Partner with TPRM leadership to translate strategic priorities into operational execution plans and measurable outcomes.
• Ensure consistent execution and oversight of supplier criticality, risk assessment, issue management, ongoing monitoring, and remediation processes.
• Identify and remove operational bottlenecks while driving improved efficiency and stakeholder experience.
• Support implementation and stabilization of expanded TPRM capabilities and operating models.
• Own development and execution of TPRM governance routines, including operational reviews, risk escalation forums, and executive reporting.
• Establish meaningful performance measurements and service-level metrics across the TPRM ecosystem.
• Develop clear and actionable reporting for senior leadership focused on program effectiveness, risk trends, capacity, and operational health.
• Ensure alignment between TPRM operational performance and enterprise risk management objectives.
• Provide leadership oversight of external TPRM service providers and operational partners.
• Establish performance standards, service expectations, escalation pathways, and continuous improvement mechanisms.
• Drive operational readiness planning to support increasing assessment volumes, geographic expansion, and future program maturity.
• Evaluate resource models, workflows, and capabilities required for long-term program scalability.
• Elevate partnerships across Strategic Sourcing, Legal, Compliance, Information Security, Quality, Finance, Enterprise Risk Management, and business functions.
• Act as a trusted advisor to stakeholders on TPRM operational processes, governance expectations, and risk escalation practices.
• Drive alignment among risk owners, business stakeholders, and operational teams to ensure consistent decision-making and accountability.
• Facilitate communication across functions to improve transparency, responsiveness, and overall program effectiveness.
• Identify opportunities to simplify, standardize, and optimize TPRM processes.
• Partner with process, technology, and analytics leaders to improve user experience and operational effectiveness.
• Support implementation of automation, reporting enhancements, and workflow improvements that increase productivity and scalability.
• Champion operational excellence principles and promote a culture of accountability, service, and continuous improvement.

Skills

Strategic leadership

Analytical skills

Project management

Stakeholder management

Cross-functional collaboration

Communication

Education

Bachelor’s degree in Business, Finance, Risk Management, or related field

Professional certifications (CRMA, CTPRP, CISM) preferred

Tools

Third-party risk assessment tools

Dashboards and governance frameworks

Job description

## Director, Enterprise Third-Party Risk Management Operations & GovernanceApply: Boston, MA: Full time: Posted Today: REQ-30206**Job Description****General Summary:**As a key leader within Strategic Sourcing and Enterprise Third-Party Risk Management (TPRM), the Director, Enterprise Third-Party Risk Management Operations & Governance is responsible for ensuring seamless operational execution of the enterprise TPRM program while preparing the organization for future scale and maturity.This role serves as the bridge between strategic program development and operational delivery, partnering closely with TPRM leadership, business stakeholders, Risk SMEs, sourcing teams, and managed service providers (MSPs) to ensure efficient execution, consistent governance, stakeholder engagement, and operational excellence across the third-party risk lifecycle.The Director will focus on integrating existing and emerging TPRM capabilities, strengthening stakeholder partnerships, enhancing governance and reporting, and building scalable operating models that support Vertex's evolving risk management objectives.**Key Duties and Responsibilities:****Operational Integration & Program Delivery*** Lead operational integration of existing and newly established TPRM processes to create a seamless end-to-end third-party risk experience.* Partner with TPRM leadership to translate strategic priorities into operational execution plans and measurable outcomes.* Ensure consistent execution and oversight of supplier criticality, risk assessment, issue management, ongoing monitoring, and remediation processes.* Identify and remove operational bottlenecks while driving improved efficiency and stakeholder experience.* Support implementation and stabilization of expanded TPRM capabilities and operating models.**Governance & Executive Reporting*** Own development and execution of TPRM governance routines, including operational reviews, risk escalation forums, and executive reporting.* Establish meaningful performance measurements and service-level metrics across the TPRM ecosystem.* Develop clear and actionable reporting for senior leadership focused on program effectiveness, risk trends, capacity, and operational health.* Ensure alignment between TPRM operational performance and enterprise risk management objectives.**Managed Service Provider (MSP) Oversight & Scale Readiness*** Provide leadership oversight of external TPRM service providers and operational partners.* Establish performance standards, service expectations, escalation pathways, and continuous improvement mechanisms.* Drive operational readiness planning to support increasing assessment volumes, geographic expansion, and future program maturity.* Evaluate resource models, workflows, and capabilities required for long-term program scalability.**Stakeholder Engagement & Partnership*** Elevate partnerships across Strategic Sourcing, Legal, Compliance, Information Security, Quality, Finance, Enterprise Risk Management, and business functions.* Act as a trusted advisor to stakeholders on TPRM operational processes, governance expectations, and risk escalation practices.* Drive alignment among risk owners, business stakeholders, and operational teams to ensure consistent decision-making and accountability.* Facilitate communication across functions to improve transparency, responsiveness, and overall program effectiveness.**Continuous Improvement & Operational Excellence*** Identify opportunities to simplify, standardize, and optimize TPRM processes.* Partner with process, technology, and analytics leaders to improve user experience and operational effectiveness.* Support implementation of automation, reporting enhancements, and workflow improvements that increase productivity and scalability.* Champion operational excellence principles and promote a culture of accountability, service, and continuous improvement.**Leadership*** Lead and develop team members while fostering strong collaboration across the broader TPRM organization.* Promote a customer-focused mindset that balances business objectives with effective risk management.* Support organizational change efforts as program capabilities continue to evolve.**Knowledge and Skills:*** Strong analytical and project management skills.* Exceptional leadership, communication, and stakeholder management skills.* Familiarity with third-party risk assessment tools, dashboards, and governance frameworks.* Ability to lead cross-functional teams and drive operational excellence.* Track record of delivering measurable outcomes through process transformation, automation, and user experience redesign.* Thoughtful and active listener; able to think quickly and effectively articulate points of view.* Ability to work in collaborative, team environment; ability to cultivate and maintain effective business partner relationships through earned respect and trust* Ability to manage multiple priorities while ensuring deliverables are fully met, including more complex and involved projects.* Knowledge of regulatory requirements and industry best practices in third-party risk.**Education and Experience:*** Bachelor’s degree in Business, Finance, Risk Management, or related field.* Professional certifications (e.g., CRMA, CTPRP, CISM) preferred.* Strong analytical and project management skills.* Exceptional leadership, communication, and stakeholder management skills.* Familiarity with third-party risk assessment tools, dashboards, and governance frameworks.* Ability to lead cross-functional teams and drive operational excellence.* Track record of delivering measurable outcomes through process transformation, automation, and user experience redesign.* Thoughtful and active listener; able to think quickly and effectively articulate points of view.* Ability to work in collaborative, team environment; ability to cultivate and maintain effective business partner relationships through earned respect and trust* Ability to manage multiple priorities while ensuring deliverables are fully met, including more complex and involved projects.* Knowledge of regulatory requirements and industry best practices in third-party risk. At Vertex, we embrace continuous learning and encourage employees to stay informed on advances in AI, technology, automation, and industry trends. We seek talent who bring an external perspective, demonstrate curiosity and sound judgment, and thoughtfully adopt new capabilities that improve decision-making, drive innovation, increase efficiency, and help deliver better outcomes for patients.**Pay Range:**$176,000 - $264,000**Disclosure Statement:**The range provided is based on what we believe is a reasonable estimate for the base salary pay range for this job at the time of posting. This role is eligible for an annual bonus and annual equity awards. Some roles may also be eligible for overtime pay, in accordance with federal and state requirements. Actual base salary pay will be based on a number of factors, including skills, competencies, experience, and other job-related factors permitted by law.At Vertex, our Total Rewards offerings also include inclusive market-leading benefits to meet our employees wherever they are in their career, financial, family and wellbeing journey while providing flexibility and resources to support their growth and aspirations. From medical, dental and vision benefits to generous paid time off (including a week-long company shutdown in the Summer and the Winter), educational assistance programs including student loan repayment, a generous commuting subsidy, matching charitable donations, 401(k) and so much more.**Flex Designation:**Hybrid-Eligible Or On-Site Eligible**Flex Eligibility Status:**In this Hybrid-Eligible role, you can choose to be designated as: 1. **Hybrid**: work remotely up to two days per week; **or select** 2. **On-Site**: work five days per week on-site with ad hoc flexibility.Note: The Flex status for this position is subject to Vertex’s Policy on Flex @ Vertex Program and may be changed at any time.#LI-Hybrid