Senior Manager, Third-Party Risk & Access Governance

BigRio; United States; On-site; USD 130,000 - 170,000; Full time

Job summary

BigRio seeks a Manager of Third Party Risk to build and mature its enterprise TPRM program, overseeing vendor intake, risk tiering, security assessments, onboarding, ongoing monitoring, and offboarding for both upstream and downstream vendors. The role reports to the Director of Information Security and drives audit readiness across ISO and HITRUST frameworks, ensuring PHI/PII protection.

Responsibilities include leading a quarterly User Access Review program and collaborating with

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field.

Responsibilities

• Mature the enterprise Third-Party Risk Management program for upstream and downstream vendors.

Skills

Vendor risk management

Information security

Risk management

Audit

User Access Review

Communication

Project management

HIPAA knowledge

GRC

Education

Bachelor's degree in Cybersecurity / IT / Risk Management

Tools

SIG questionnaire

TrustArc

Job description

BigRio seeks a Manager of Third Party Risk to build and mature its enterprise TPRM program, overseeing vendor intake, risk tiering, security assessments, onboarding, ongoing monitoring, and offboarding for both upstream and downstream vendors. The role reports to the Director of Information Security and drives audit readiness across ISO and HITRUST frameworks, ensuring PHI/PII protection.

Responsibilities include leading a quarterly User Access Review program and collaborating with