Enterprise Vendor & Contract Governance Lead

Mbi Llc; Trenton (NJ); Vor Ort; USD 140.000 - 200.000; Vollzeit

Zusammenfassung

MBI LLC is seeking a Senior Vendor & Contract Manager to lead enterprise-wide vendor compliance, third-party governance, and IT audit readiness under the CIO. The role focuses on policy lifecycle, ITGC enforcement, and right-to-audit clauses across the technology ecosystem.

The ideal candidate has 8+ years in IT compliance and TPRM within large-scale enterprises, with deep experience in SOC 1/2, NIST/ISO controls, and executive-level risk reporting.

Qualifikationen

• 8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience in large-scale enterprise environments.
• Authoring and operationalizing enterprise IT security, governance and regulatory policies.
• Experience evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Strong track record presenting risk metrics, compliance status, and audit readouts to executives.
• Knowledge of NIST (SP 800-53 / CSF) and ISO 27001 frameworks.
• TPRM & cloud/SaaS vendor qualification experience.
• Bachelor's degree minimum.

Aufgaben

• Lead Third-Party Risk Management (TPRM) and vendor compliance across cloud providers, software vendors, and system integrators.
• Oversee IT audit readiness, evaluating SOC 1/SOC 2 Type II reports, ISO certifications, and third-party attestations.
• Manage remediation lifecycles and root-cause analyses to close audit deficiencies.
• Author and update IT security, governance, privacy policies, standards, and SOPs to align with NIST, state, and federal mandates.
• Enforce ITGC, access governance, and data protection baselines across internal and vendor environments.
• Collaborate with Legal and Procurement to review exhibits, DP/Sharing agreements, SLAs, and right-to-audit clauses.
• Advise CIO on enterprise compliance posture with risk dashboards and mitigation strategies.

Kenntnisse

IT Compliance, ITGC & Audit Governance

Policy authoring & updates

Audit finding remediation

NIST/ISO controls knowledge

TPRM & cloud/SaaS qualification

SOC1/SOC2 attestation evaluation

Bachelor's degree minimum

Ausbildung

Bachelor's Degree

Jobbeschreibung

MBI LLC is seeking a Senior Vendor & Contract Manager to lead enterprise-wide vendor compliance, third-party governance, and IT audit readiness under the CIO. The role focuses on policy lifecycle, ITGC enforcement, and right-to-audit clauses across the technology ecosystem.

The ideal candidate has 8+ years in IT compliance and TPRM within large-scale enterprises, with deep experience in SOC 1/2, NIST/ISO controls, and executive-level risk reporting.