NJDOE - Senior Vendor & Contract Mgr

Software Technology Inc; New Jersey; Hybrid; USD 140,000 - 170,000; Full time

Job summary

Software Technology Inc. is seeking a Senior Vendor & Contract Manager to lead enterprise-wide third-party risk, IT audit readiness, and policy lifecycle management. You will ensure alignment with NIST, SOC, ISO controls, and regulatory mandates across the technology ecosystem.

Reporting to the CIO, you will drive remediation, vendor compliance, and governance across internal platforms and vendor environments, providing risk scorecards and dashboards to executive leadership.

Qualifications

• 8+ years of IT compliance and risk management in large-scale enterprises.
• Experience evaluating SOC 1/SOC 2 Type II reports and NIST/ISO control frameworks.
• Proven ability to author and operationalize enterprise IT security, governance, and regulatory policies.
• Strong background presenting risk metrics and audit readouts to executive leadership.

Responsibilities

• Lead Third-Party Risk Management (TPRM) across vendors, cloud providers, and system integrators.
• Oversee IT audit readiness, control attestations, and remediation lifecycle management.
• Draft and maintain IT security, privacy, and governance policies and SOPs to align with NIST, state, and federal mandates.
• Enforce ITGC and data protection baselines across internal and external environments.
• Collaborate with Legal and Procurement on Data Processing/Sharing Agreements and SLAs.
• Advise the CIO with executive risk dashboards and mitigation strategies.

Skills

IT Compliance

Third-Party Risk Management

Audit Governance

Policy Development

NIST/ISO Control Frameworks

SOC 1/SOC 2 Type II

Executive Reporting

Education

Bachelor's Degree

Job description

Senior Vendor & Audit Contract Manager reporting to the CIO to lead third-party -party risk, IT audit readiness, remediation, and policy lifecycle management, aligning public sector systems with NIST, SOC, and enterprise IT security baselines.

Note: This is a hybrid position - 3 days on-site, and 2 days remote.

We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management across our technology ecosystem.

Key Responsibilities:

• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.
• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.
• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.
• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.

Qualifications:

• 8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience within large-scale enterprise environments.
• Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.
• Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.

Required/Desired Skills:

• IT Compliance, ITGC & Audit Governance in Enterprise Environments - Required 8 Years
• Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies - Required 7 Years
• Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans - Required 7 Years
• Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks - Required 7 Years
• Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification - Highly desired 7 Years
• Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations - Highly desired 7 Years
• Bachelor s Degree minimum - Required 0