Remote IT Third-Party Risk Manager

Abrigo; Raleigh (NC); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits with HSA

Flexible PTO and bank holidays

401(k) plan with company match

Bonus structure

Job summary

Abrigo is seeking an IT Third-Party Risk Manager to lead the Third-Party Risk Management Program and serve as a key liaison across Information Security, Technology, Finance, Legal, Product, and business stakeholders. This remote-first role is primarily based in Raleigh, NC with quarterly onsite engagements and periodic onsite visits during external audit fieldwork.

Reporting to the VP IT Risk & Assurance as part of Abrigo's CISO organization, you will drive governance, documentation, and

Qualifications

• 4+ years of IT risk assessment and/or IT audit experience.
• Bachelor's degree in Information Systems, Risk Management, Business Administration, Accounting, or a related field.
• Professional certifications such as CRVPM, TPCRA, CISA, or CRISC preferred.

Responsibilities

• Lead operational administration of Abrigo's Third-Party Risk Management Program.
• Coordinate vendor onboarding, inherent and residual risk reviews, due diligence collection, and annual reassessments.
• Review vendor security documentation including SOC reports, security questionnaires, policies, certifications, and risk assessments.
• Maintain vendor records, ownership assignments, and supporting documentation within approved governance platforms.
• Monitor vendor review schedules, risk treatment activities, contract obligations, and remediation commitments.
• Assist in developing metrics, dashboards, and reporting related to risk, compliance, vendor governance, and audit activities.
• Research new technologies and standards to improve risk assessment processes.
• Act as SME on risk threats and mitigations.
• Maintain and enhance policies, training materials, and playbooks.
• Promote continuous improvement through automation and process optimization.
• Assist with customer assurance materials and audit responses.

Skills

IT risk assessment

Communication

Organization

Education

Bachelor's degree

Job description

Abrigo is seeking an IT Third-Party Risk Manager to lead the Third-Party Risk Management Program and serve as a key liaison across Information Security, Technology, Finance, Legal, Product, and business stakeholders. This remote-first role is primarily based in Raleigh, NC with quarterly onsite engagements and periodic onsite visits during external audit fieldwork.

Reporting to the VP IT Risk & Assurance as part of Abrigo's CISO organization, you will drive governance, documentation, and