Hybrid Senior Vendor & Compliance Manager

vTech Solution; Trenton (NJ); Hybrid; USD 140,000 - 190,000; Full time

Job summary

vTech Solution is seeking a Senior Vendor & Contract Manager to oversee third-party risk management, IT audit readiness, and policy lifecycle management. The role reports to the CIO and ensures enterprise compliance with NIST, SOC, and ISO frameworks.

You will manage vendor compliance across cloud providers, software vendors, and system integrators while aligning public sector systems with established IT security baselines.

Qualifications

• Minimum 8 years of experience in IT compliance and third-party risk management within large enterprise environments.
• Experience authoring and operationalizing enterprise IT security, governance, and regulatory policies.
• Strong ability to evaluate SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Proven track record in audit remediation, root-cause analysis, and action plan development.
• Familiarity with NIST SP 800-53 / Cybersecurity Framework and ISO 27001 security standards.
• Bachelor's degree or equivalent educational qualification.

Responsibilities

• Lead third-party risk management by establishing vendor vetting, risk scoring, and continuous compliance monitoring.
• Oversee IT audit readiness and execution, including evaluation of SOC 1/SOC 2 Type II reports, ISO certifications, and third-party control attestations.
• Manage remediation lifecycles by conducting root-cause analyses and verifying evidence to close audit findings.
• Author, update, and maintain IT security, privacy, and governance policies, standards, and SOPs aligned with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal and vendor environments.
• Collaborate with Legal and Procurement teams to review and enforce compliance exhibits, data processing agreements, SLAs, and audit rights.
• Advise the CIO on enterprise compliance posture through executive risk scorecards, audit tracking dashboards, and mitigation strategies.

Skills

IT compliance

Third-party risk management

Audit governance

Policy development

NIST/ISO control frameworks

Vendor management

Executive communication

Education

Bachelor's degree or equivalent

Job description

vTech Solution is seeking a Senior Vendor & Contract Manager to oversee third-party risk management, IT audit readiness, and policy lifecycle management. The role reports to the CIO and ensures enterprise compliance with NIST, SOC, and ISO frameworks.

You will manage vendor compliance across cloud providers, software vendors, and system integrators while aligning public sector systems with established IT security baselines.