Remote TPRM Assessment & Remediation Lead

Programmers.io; Austin (TX); Remote; USD 120,000 - 160,000; Full time

Job summary

Programmers.io seeks an experienced Third-Party Risk Management (TPRM) Assessment and Remediation SME to manage the end-to-end lifecycle of supplier/vendor cybersecurity risk assessments and remediation in a fully remote, client-facing environment.

This role requires precise, proactive communication to maintain trust with high-visibility stakeholders, serving as the process authority for risk assessments, findings, and remediation across Legal, Procurement, and InfoSec teams.

Qualifications

• 5+ years in cybersecurity, TPRM, GRC operations, or supplier risk coordination.
• Working knowledge of NIST CSF, ISO 27001, SOC 2, SIG/CAIQ.
• Hands-on experience with GRC/TPRM tools (OneTrust, Archer, ServiceNow GRC, SupplierNinja, or similar).
• Proven ownership of high-volume, multi-step communication workflows with strict tracking/documentation.
• Excellent written communication for remote, client-facing engagement.
• Experience operating in distributed/remote teams.

Responsibilities

• Supplier Inventory Management: maintain the Supplier Inventory as the single source of truth for assessment status.
• Assessment Execution: evaluate suppliers against standard frameworks and validate evidence.
• Remediation Management: own CAPs end-to-end and track progress with vendors.

Skills

Cybersecurity

TPRM

GRC operations

Supplier risk coordination

Stakeholder communication

Remote work coordination

Education

CTPRP

CRISC

CISA

CISSP

Certifications

Tools

OneTrust

Archer

ServiceNow GRC

SupplierNinja

Wrike

AirTable

Jira

Job description

Programmers.io seeks an experienced Third-Party Risk Management (TPRM) Assessment and Remediation SME to manage the end-to-end lifecycle of supplier/vendor cybersecurity risk assessments and remediation in a fully remote, client-facing environment.

This role requires precise, proactive communication to maintain trust with high-visibility stakeholders, serving as the process authority for risk assessments, findings, and remediation across Legal, Procurement, and InfoSec teams.