NJDOE - Senior Vendor & Contract Mgr (815048)

Rulesys Technologies Inc.; Trenton (NJ); Hybrid; USD 120,000 - 165,000; Full time

Job summary

Rulesys Technologies Inc in Trenton, NJ is seeking a Senior Vendor & Audit Contract Manager reporting to the CIO to lead third-party risk, IT audit readiness, and policy lifecycle management across our technology ecosystem in a hybrid work arrangement. The role focuses on vendor governance, ITGC enforcement, remediation of audit findings, and aligning with NIST, SOC, ISO standards.

You will collaborate with Legal and Procurement to tighten contracts and right-to-audit clauses, and present

Qualifications

• 8+ years of IT compliance, TPRM, and audit governance experience in large-scale enterprises.
• Proven track record authoring and operationalizing IT security, governance policies.
• Experience evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO controls.
• Strong ability to present risk metrics and audit readouts to executive leadership.

Responsibilities

• Lead Third-Party Risk Management (TPRM) with vendor vetting, risk scoring, and continuous compliance.
• Oversee IT audit readiness and evaluation of SOC and ISO reports.
• Manage remediation lifecycles and root-cause analysis with IT teams.
• Author and maintain IT security, governance policies and SOPs for compliance.
• Enforce IT General Controls and data protection baselines across platforms.
• Collaborate with Legal and Procurement on contracts and right-to-audit clauses.
• Advise CIO with risk scorecards and audit dashboards.

Skills

IT compliance

ITGC & Audit Governance

Enterprise IT security

NIST/ISO controls

Executive risk reporting

Education

Bachelor's degree

Job description

Acknowledgment

Candidates must agree to the following terms before applying:

• This is a contract role; visa sponsorship is not provided.
• You have not applied for this position through any other agency or recruiter.
• Candidates must work directly on a C2C (Corp-to-Corp) basis.

Senior Vendor & Audit Contract Manager reporting to the CIO to lead third-party risk, IT audit readiness, remediation, and policy lifecycle management, aligning public sector systems with NIST, SOC, and enterprise IT security baselines.

Complete Description

This is a hybrid position: 3 days on-site and 2 days remote at 100 Riverview Plaza, Trenton, NJ 08625.

We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management across our technology ecosystem.

Key Responsibilities:

• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.
• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.
• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and SOPs to ensure continuous alignment with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.
• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.

Qualifications:

• 8+ years of IT compliance, TPRM, and audit governance experience within large-scale enterprise environments.
• Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.
• Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.

Required / Desired Skills

Skill

Required / Desired

Amount

of Experience

IT Compliance, ITGC & Audit Governance in Enterprise Environments Required 8 Years

Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies Required 7 Years

Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans Required 7 Years

Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Required 7 Years

Bachelor's Degree minimum Required Years

Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification Highly desired 7 Years

Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations Highly desired 7 Years