Director, Third-Party Risk & Technical Security Lead

Relha LLC; New York (NY); Hybrid; USD 177,000 - 294,000; Full time

Job summary

Pfizer is seeking a Director, Third-Party Risk Management (TPRM) and Technical Information Security Lead (TISL) to own the enterprise TPRM security strategy and operating model. This executive role partners with Procurement, Legal, Privacy, Quality, Security, Internal Audit, and Business Leadership to embed security and regulatory compliance into vendor relationships.

The role translates complex technical risks into executive insights, drives continuous program improvement, and leads critical

Qualifications

• Bachelor’s or higher degree with relevant cybersecurity, risk, or governance background.
• 8+ years in cybersecurity, cyber risk, GRC, TPRM, security architecture, IT risk, or audit.
• Experience leading teams and complex risk programs with multiple stakeholders.
• Strong communication and collaboration across functions in a regulated environment.

Responsibilities

• Provide executive-level oversight and approval for high-risk vendor risk assessments.
• Lead governance for risk treatment decisions, remediation prioritization, and risk acceptances.
• Translate complex technical risks into executive-level insights and decisions.
• Partner with Procurement, Legal, Privacy, Quality, Security, Internal Audit, and Business Leadership.
• Align TPRM strategy with enterprise cyber risk appetite and regulatory expectations.

Skills

Strategic thinking

Analytical skills

Problem solving

Executive communication

Leadership

GRC / TPRM knowledge

Education

Bachelor’s degree with 8+ years of experience

Master’s degree with 7+ years of experience

Ph.D. with 5+ years of experience

Job description

Pfizer is seeking a Director, Third-Party Risk Management (TPRM) and Technical Information Security Lead (TISL) to own the enterprise TPRM security strategy and operating model. This executive role partners with Procurement, Legal, Privacy, Quality, Security, Internal Audit, and Business Leadership to embed security and regulatory compliance into vendor relationships.

The role translates complex technical risks into executive insights, drives continuous program improvement, and leads critical