Hybrid Senior Vendor, Audit & Contract Manager

GSK Solutions Inc.; Trenton (NJ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

GSK Solutions Inc. seeks a Senior Vendor & Contract Manager in Trenton, NJ to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management.

This role reports to the CIO and requires shaping controls across our technology ecosystem. The successful candidate will drive remediation lifecycles, review SOC 1/SOC 2 Type II reports, and enforce ITGCs and data protection baselines while partnering with Legal and Procurement to ensure robust

Qualifications

• 8+ years of IT compliance, TPRM, and audit governance experience in large-scale enterprise environments.
• Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.
• Deep familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Strong background presenting risk metrics, compliance status, and audit readouts to executive leadership.

Responsibilities

• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.
• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.
• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close audit deficiencies.
• Author, update, and maintain IT security, privacy, and technology governance policies, standards, and SOPs for continued alignment with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.
• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.

Skills

IT Compliance

TPRM

Audit Governance

Policy Development

NIST/ISO 27001

SOC 1/SOC 2

Cloud/SaaS

Executive Communication

Education

Bachelor's Degree

Job description

GSK Solutions Inc. seeks a Senior Vendor & Contract Manager in Trenton, NJ to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management.

This role reports to the CIO and requires shaping controls across our technology ecosystem. The successful candidate will drive remediation lifecycles, review SOC 1/SOC 2 Type II reports, and enforce ITGCs and data protection baselines while partnering with Legal and Procurement to ensure robust