Hybrid Senior Third-Party Risk & Audit Leader

Software Technology Inc; New Jersey; Hybrid; USD 140,000 - 170,000; Full time

Job summary

Software Technology Inc. is seeking a Senior Vendor & Contract Manager to lead enterprise-wide third-party risk, IT audit readiness, and policy lifecycle management. You will ensure alignment with NIST, SOC, ISO controls, and regulatory mandates across the technology ecosystem.

Reporting to the CIO, you will drive remediation, vendor compliance, and governance across internal platforms and vendor environments, providing risk scorecards and dashboards to executive leadership.

Qualifications

• 8+ years of IT compliance and risk management in large-scale enterprises.
• Experience evaluating SOC 1/SOC 2 Type II reports and NIST/ISO control frameworks.
• Proven ability to author and operationalize enterprise IT security, governance, and regulatory policies.
• Strong background presenting risk metrics and audit readouts to executive leadership.

Responsibilities

• Lead Third-Party Risk Management (TPRM) across vendors, cloud providers, and system integrators.
• Oversee IT audit readiness, control attestations, and remediation lifecycle management.
• Draft and maintain IT security, privacy, and governance policies and SOPs to align with NIST, state, and federal mandates.
• Enforce ITGC and data protection baselines across internal and external environments.
• Collaborate with Legal and Procurement on Data Processing/Sharing Agreements and SLAs.
• Advise the CIO with executive risk dashboards and mitigation strategies.

Skills

IT Compliance

Third-Party Risk Management

Audit Governance

Policy Development

NIST/ISO Control Frameworks

SOC 1/SOC 2 Type II

Executive Reporting

Education

Bachelor's Degree

Job description

Software Technology Inc. is seeking a Senior Vendor & Contract Manager to lead enterprise-wide third-party risk, IT audit readiness, and policy lifecycle management. You will ensure alignment with NIST, SOC, ISO controls, and regulatory mandates across the technology ecosystem.

Reporting to the CIO, you will drive remediation, vendor compliance, and governance across internal platforms and vendor environments, providing risk scorecards and dashboards to executive leadership.