Executive TPRM & Technical Information Security Lead

Jobtailor; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Jobtailor in New York seeks a Senior Enterprise Third-Party Risk Management (TPRM) security leader to own the strategy, program, and operating model, aligning with cyber risk appetite and pharmaceutical regulatory expectations.

You will drive scalable risk tiering, continuous monitoring, and remediation governance, provide executive oversight, and partner with Legal, Procurement, Privacy, and Audit to embed security and resilience into third-party agreements.

Qualifications

• Bachelor's degree with 8+ years of experience in cybersecurity, risk, or audit.
• Master's degree with 7+ years of experience; or PhD with 5+ years of experience.
• Experience leading teams and complex risk programs with multiple stakeholders.
• Strong strategic thinking, analytics, and decision-making capabilities.

Responsibilities

• Own the enterprise TPRM security strategy, program, and operating model.
• Align TPRM with enterprise cyber risk appetite, priorities, and regulatory expectations.
• Establish scalable risk tiering, assessment depth, reassessment cadence, and monitoring.
• Provide executive oversight for high-risk vendor assessments and remediation governance.
• Lead governance for remediation prioritization and formal risk acceptances.
• Escalate material vendor risks to risk committees and executive leadership.
• Advise executives on cybersecurity risk and translate technical risk into insights.
• Partner with Procurement, Legal, Privacy, Quality, Security, Internal Audit, and Leadership.
• Influence contract standards to embed security, privacy, and resilience in third-party agreements.
• Represent GRC in executive forums and cross-functional steering committees.
• Set strategic priorities, delegate execution, and maintain accountability.
• Drive talent development and capability maturity across the function.

Skills

TPRM

Cybersecurity

GRC

Risk Assessment

Team Leadership

Agile Methodologies

Stakeholder Management

Strategic Thinking

Communication

Education

Bachelor's degree

Master's degree

PhD

Job description

Jobtailor in New York seeks a Senior Enterprise Third-Party Risk Management (TPRM) security leader to own the strategy, program, and operating model, aligning with cyber risk appetite and pharmaceutical regulatory expectations.

You will drive scalable risk tiering, continuous monitoring, and remediation governance, provide executive oversight, and partner with Legal, Procurement, Privacy, and Audit to embed security and resilience into third-party agreements.