Remote TPRM Lead — AI-Driven Risk & Automation

CrowdStrike Inc.; Salem (OR); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation & equity

Wellness programs

Generous vacation & holidays

Parental leave & family support

Professional development opportunities

Employee networks & volunteering

Vibrant culture & Great Place to Work

Job summary

CrowdStrike Inc. is seeking a Lead, Third Party Risk Management (TPRM) to drive strategy, architecture, and technical execution of the vendor risk program. This role sits in the GRC organization and protects customers, data, and operations through scalable risk practices.

The ideal candidate combines hands-on tooling with process expertise, aiming to automate risk postures in a fast-growing tech environment while aligning with trusted security frameworks.

Qualifications

• 10+ years of experience in Third Party Risk Management, GRC, or related disciplines.
• Hands-on experience with the ServiceNow TPRM module.
• 3+ years as a technical lead or SME driving automation in risk/compliance.
• Strong understanding of security/compliance frameworks (NIST CSF, ISO 27001, SOC 2, etc).
• Experience evaluating AI/ML tools in GRC workflows.
• Excellent stakeholder management translating technical risk for business audiences.
• Ability to operate in a fast-paced global technology environment.

Responsibilities

• Serve as functional owner and SME for ServiceNow TPRM platform.
• Manage day-to-day TPRM assessment pipeline operations and SLAs.
• Lead automation enhancements within ServiceNow to reduce manual effort.
• Architect end-to-end vendor risk lifecycle (onboarding, reassessment, offboarding).
• Own story creation and liaison with development teams.
• Embed risk checks into vendor engagement pipelines with cross-functional teams.
• Oversee third-party control evaluations and audits.
• Develop and maintain technical TPRM policies aligned with NIST/SOC 2/ISO 27001.
• Engineer and track automated KPIs and dashboards for leadership.

Skills

Third Party Risk Management

GRC

Information security risk

Strategic communication

Adaptability

Cross-functional collaboration

Tools

ServiceNow TPRM module

AI/ML tooling integration

Job description

CrowdStrike Inc. is seeking a Lead, Third Party Risk Management (TPRM) to drive strategy, architecture, and technical execution of the vendor risk program. This role sits in the GRC organization and protects customers, data, and operations through scalable risk practices.

The ideal candidate combines hands-on tooling with process expertise, aiming to automate risk postures in a fast-growing tech environment while aligning with trusted security frameworks.