Remote Third-Party Risk Leader (HIPAA & ISO)

Baylor Genetics; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Baylor Genetics is seeking a Manager, Third Party Risk to build and mature the enterprise TPRM program, protecting PHI/PII and ensuring HIPAA, GDPR, CLIA compliance across vendors and partners.

Reporting to the Director of Information Security, you will own vendor intake, risk tiering, security assessments, onboarding, ongoing monitoring, and offboarding, plus lead UAR and audit readiness with ISO/HITRUST alignment.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Risk Management or equivalent.
• 6–8 years in information security, risk, or compliance with vendor management.
• Hands-on audit experience with ISO 27001/27701/42001 and HITRUST.

Responsibilities

• Lead and mature enterprise Third-Party Risk Management program for upstream and downstream vendors.
• Own vendor intake, reassessment, inherent-risk scoring, risk-tiering; lead SOC 2, HITRUST, ISO 27001 reviews.
• Establish onboarding, continuous monitoring, reassessment processes and draft SOPs and documentation.
• Conduct internal and external vendor audits for high-risk vendors; maintain vendor risk heat map.
• Operate ongoing monitoring, BAAs/DPAs, DPIAs/TIAs, and sub-processor requirements with cross-functional partners.

Skills

Vendor risk management

Audit readiness

Risk-based lifecycle

Least-privilege access

HIPAA/GDPR knowledge

ISMS/ISO 27001

Education

Bachelor’s degree in cybersecurity or related field

Tools

SIG questionnaire

GRC platforms (e.g., TrustArc)

Job description

Baylor Genetics is seeking a Manager, Third Party Risk to build and mature the enterprise TPRM program, protecting PHI/PII and ensuring HIPAA, GDPR, CLIA compliance across vendors and partners.

Reporting to the Director of Information Security, you will own vendor intake, risk tiering, security assessments, onboarding, ongoing monitoring, and offboarding, plus lead UAR and audit readiness with ISO/HITRUST alignment.