Remote IT Third-Party Risk Lead | Compliance & Audit

Abrigo; Raleigh (NC); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits (HSA)

Flexible PTO

401(k) plan with company match

Bonus

Job summary

Abrigo, a leading provider of risk management technology, seeks an IT Third-Party Risk Manager to lead the third-party risk program. The role collaborates with security, technology, legal, and business teams to ensure regulatory and contractual compliance and continuous improvement.

Based remote-first with Raleigh, NC as a base, the role focuses on audit readiness, governance, and risk assessment, reporting to the VP IT Risk & Assurance within Abrigo's CISO organization.

Qualifications

• 4+ years of IT risk assessment and/or IT audit experience
• Experience reading SOC 1/SOC 2 reports, security assessments, and continuity exercises
• Strong written and verbal communication with management
• Knowledge of information security standards and applicable laws (NIST, FFIEC, GLBA)
• Experience supporting IT risk management, information security, or third‑party risk programs

Responsibilities

• Lead administration of Abrigo's Third-Party Risk Management Program
• Coordinate vendor onboarding, risk reviews, due diligence, and annual reassessments
• Review vendor security documentation and determine required actions
• Maintain vendor records and governance documentation
• Monitor risk treatment activities, contracts, and remediation commitments
• Develop metrics, dashboards, and reporting on risk, compliance, and audits
• Assist with policy maintenance and playbooks
• Promote automation and process optimization in risk management
• Support audit evidence collection and audit responses
• Occasional travel for team events and audits

Skills

IT risk assessment

IT audit

SOC reports

communication

risk management

Education

Bachelor's degree in Information Systems or related field

Job description

Abrigo, a leading provider of risk management technology, seeks an IT Third-Party Risk Manager to lead the third-party risk program. The role collaborates with security, technology, legal, and business teams to ensure regulatory and contractual compliance and continuous improvement.

Based remote-first with Raleigh, NC as a base, the role focuses on audit readiness, governance, and risk assessment, reporting to the VP IT Risk & Assurance within Abrigo's CISO organization.