Lead Third-Party Risk & Compliance Manager

State Teachers Retirement System of Ohio; North Carolina; On-site; USD 68,000 - 82,000; Full time

Benefits offered by this job

On-site parking

Educational assistance

Subsidized medical insurance

Dental & life insurance

Vacation and sick leave

On-site fitness center

Job summary

STRS Ohio is seeking a Third Party Risk Manager to join the Executive/Business Operations and Security team. Under ITS Systems Security, you will oversee the TPRM program, due diligence, assessments, monitoring and governance for vendor relationships.

The role focuses on developing strategies, questionnaires, reviewing contracts, conducting risk assessments, and staying current with regulatory and cybersecurity trends to strengthen STRS Ohio's risk posture.

Qualifications

• Bachelor's degree in computer science, business administration, risk management or related field required.
• Three or more years' information technology and third‑party risk management experience required.
• Experience with third party risk management (TPRM) software platforms and risk data analysis/reporting tools preferred.

Responsibilities

• Develop, implement and continuously improve the organization’s third‑party risk management strategy, policy and procedures ensuring effective oversight of vendor relationships.
• Lead the development of pre‑contract and self‑attestation questionnaires to be completed by prospective and current STRS Ohio vendors. Monitor questionnaire completion, coordinating with vendors and internal stakeholders. Tailor due diligence requirements and questionnaire content based on the vendor’s risk profile, criticality and service type.
• Review and assess vendor contracts to ensure appropriate risk mitigation, including information security, artificial intelligence (AI)/machine learning use and software supply chain protections.
• Facilitate risk assessments to identify, evaluate and prioritize third‑party risks, including subcontractor dependency, operational resilience and emerging threats.
• Assess third‑party relationships for geopolitical, sanctions, and ownership‑structure risk in coordination with Sourcing and Vendor Management and Legal/Compliance.
• Monitor applicable regulatory, cybersecurity and industry developments and recommend enhancements to the TPRM program to address evolving risks and best practices.

Skills

Information technology

Third‑party risk management

Education

Bachelor's degree in computer science, business administration, risk management or related field

Tools

TPRM software platforms

Risk data analysis tools

Job description

STRS Ohio is seeking a Third Party Risk Manager to join the Executive/Business Operations and Security team. Under ITS Systems Security, you will oversee the TPRM program, due diligence, assessments, monitoring and governance for vendor relationships.

The role focuses on developing strategies, questionnaires, reviewing contracts, conducting risk assessments, and staying current with regulatory and cybersecurity trends to strengthen STRS Ohio's risk posture.