Remote Senior Third-Party Risk Lead & Automation Architect

CrowdStrike Inc.; Hartford (CT); Remote; USD 125,000 - 180,000; Full time

Job summary

CrowdStrike is seeking an experienced Lead, Third Party Risk Management (TPRM) to drive the strategy, architecture, and technical execution of our vendor risk ecosystem. This remote US role sits within the GRC organization and focuses on scalable risk practices to protect customers and data.

You will architect workflows, drive automation, and set technical standards for TPRM, partnering with Procurement, Legal, IT, and Security teams to embed risk checks into the vendor lifecycle.

Qualifications

• 10+ years of experience in Third Party Risk Management, GRC, information security risk, or related technical controls disciplines.
• Hands-on experience with the ServiceNow Third Party Risk Management (TPRM) module.
• 3+ years as technical lead, process architect, or principal SME driving operational efficiency and automation.
• Strong understanding of security and compliance frameworks (NIST CSF, CSA CCM, ISO 27001, SOC 2, NIST 800-53, etc).
• Experience evaluating AI/ML tools and threat intelligence within GRC workflows.
• Project management experience with complex technical implementations.
• Excellent stakeholder management and ability to translate technical risk to business audiences.
• Ability to operate in a fast-paced, global technology environment.

Responsibilities

• System, Tooling & AI Architecture: Serve as the functional owner, technical architect, and SME for ServiceNow TPRM platform.
• Operational Leadership: Manage day-to-day operations of the TPRM assessment pipeline with SLA tracking and final review of vendor assessments.
• Process Engineering & Automation: Lead automation within ServiceNow to reduce manual effort.
• Program Design: Architect end-to-end vendor risk lifecycle (onboarding, inherent risk tiering, reassessment, offboarding).
• Agile Development: Manage story creation and coordinate with development teams.
• Cross-Functional Integration: Collaborate with Procurement, Legal, IT, and Security engineering to embed risk checks in vendor workflows.
• Audit & Controls: Oversee third-party control evaluations and audits.
• Standards & Frameworks: Develop TPRM policies aligned with NIST, ISO 27001, SOC 2, etc.
• Metrics & Reporting: Build KPIs and dashboards to show program maturity.

Skills

10+ years in TPRM

Technical leadership

Framework fluency

AI/ML in GRC

Cross-functional execution

Strategic communications

Adaptability

Tools

ServiceNow

Job description

CrowdStrike is seeking an experienced Lead, Third Party Risk Management (TPRM) to drive the strategy, architecture, and technical execution of our vendor risk ecosystem. This remote US role sits within the GRC organization and focuses on scalable risk practices to protect customers and data.

You will architect workflows, drive automation, and set technical standards for TPRM, partnering with Procurement, Legal, IT, and Security teams to embed risk checks into the vendor lifecycle.