Senior Cyber Risk & TPRM Lead

Aventiv Technologies; United States; On-site; USD 103,000 - 129,000; Full time

Benefits offered by this job

Health Insurance

401(k)

Disability Insurance

Life Insurance

Paid Time Off

Voluntary Benefits

Job summary

Aventiv Technologies seeks a seasoned Third-Party Risk Management leader to oversee the TPRM program, drive framework governance, and coordinate cross-functional risk activities. The role requires deep security risk acumen and experience aligning controls with PCI, HIPAA, SOC2, and privacy requirements.

You will collaborate with legal, procurement, and business units to remediate gaps, report on metrics, and mentor others in security best practices.

Qualifications

• 10+ years in Third-Party Risk Management and contractual arrangements.

Responsibilities

• Manage and maintain a comprehensive TPRM framework and roadmap.
• Track, measure third-party cyber risk management roadmap with risk prioritization.
• Design, implement, and maintain a consistent TPRM approach across the enterprise.
• Identify opportunities to enhance TPRM processes with innovative solutions.
• Assess and monitor the TPRM lifecycle activities (risk assessment, due diligence, contracting, monitoring).
• Establish TPRM policy and procedures; lead deployment of the TPRM module in the GRC tool.

Skills

Cybersecurity risk management

Project management

Communication

Policy development

Stakeholder collaboration

Attention to detail

Mentoring others

Education

HS diploma or GED

Bachelor's degree preferred

Certifications: CISM, CISA, CRISC, CTPRP, CTPRA, CDPSE

Tools

GRC tool

Shared Assessments SIG

Job description

Aventiv Technologies seeks a seasoned Third-Party Risk Management leader to oversee the TPRM program, drive framework governance, and coordinate cross-functional risk activities. The role requires deep security risk acumen and experience aligning controls with PCI, HIPAA, SOC2, and privacy requirements.

You will collaborate with legal, procurement, and business units to remediate gaps, report on metrics, and mentor others in security best practices.