Senior Manager - Third Party Risk Strategy

McKinsey & Company, Inc.; Atlanta (GA); On-site; USD 191,000 - 255,000; Full time

Job summary

McKinsey & Company seeks a leader to shape and govern a global third‑party risk program. You will design the lifecycle, oversee onboarding due diligence, risk tiering, monitoring, issue management, and offboarding across suppliers and client‑facing collaborators.

You’ll drive data‑driven improvements and partner with Ethics & Compliance, Finance, and Legal to ensure strong risk governance. Based in an office with global scope, you’ll lead cross‑functional teams, advance TPRM platforms, and

Qualifications

• 10+ years in third-party risk management, compliance, or a related field.
• Expertise in third-party risk management frameworks, including lifecycle design and onboarding.
• Experience governing enterprise risk programs in a global environment.
• Strong understanding of global regulatory expectations (NIST, ISO, SOC).
• Experience with TPRM/GRC platforms, workflow design, data, and automation.

Responsibilities

• Lead strategy and program oversight across third-party risk verticals.
• Design and evolve the firm’s TPRM lifecycle and onboarding processes.
• Define and monitor metrics (service levels, onboarding cycles, risk coverage).
• Drive digital enablement, tools, data sources, and reporting infrastructure.

Skills

Third-party risk management

Compliance

GRC platforms

Data analysis

Regulatory knowledge

Communication skills

Cross-functional leadership

Microsoft Excel

Ambiguity tolerance

Tools

GRC platforms

Microsoft Excel

Visio

Job description

Do you want to do work that matters, alongside supportive leaders who will help you grow faster than you ever thought possible? Are you a creative problem-solver who is energized by challenges? You’ve come to the right place.

YOUR IMPACT

You will work out of one of our offices in Atlanta, Darien, Denver, London, New Jersey, New York, Philadelphia, or Washington, DC to lead strategy and program oversight across multiple third-party risk verticals, including suppliers and client-facing collaborators. You will be responsible for shaping and advancing a unified, end-to-end TPRM framework that supports a diverse and global third-party ecosystem. You will own the design and evolution of the firm’s third-party risk lifecycle, including risk identification, onboarding due diligence, risk tiering, ongoing monitoring, issue management, and offboarding governance. You will ensure that the framework is consistently applied across third-party segments, while incorporating tailored approaches for different risk profiles and engagement models. You will ensure that onboarding processes are efficient, auditable, and aligned with firm risk appetite and user experience expectations. You will be part of Optimize, McKinsey’s global procurement capability, enhancing and protecting the firm’s resources and reputation by making responsible buying easy and creating leading solutions and experiences across our third-party ecosystem.You will be joining the Third-Party Risk Strategy pillar of Optimize’s Third Party Risk & Social Responsibility team. Thisteam defines and governs the firm’s global third-party risk management (TPRM) program, spanning various third‑party types and risk domains. While day‑to‑day execution is led by the Operations team, you will be accountable for program performance and alignment to strategy. You will assess whether service levels, controls, and processes are operating effectively across verticals, and drive improvements where gaps are identified. You will define and monitor key program metrics, including service levels, onboarding cycle times, risk coverage, and remediation effectiveness. You will use these insights to optimize performance, reduce risk exposure, and improve the overall third‑party experience. You will partner closely with the governance pillar to inform the development of policies, standards, and control requirements, providing input based on program insights, operational performance, and emerging risks. You will ensure that policies and standards are effectively translated into scalable processes, tools, and workflows across the third‑party risk lifecycle. You will stay ahead of evolving regulatory expectations and industry frameworks (e.g., NIST, ISO, SOC, and relevant regulatory guidance), assessing implications for the program and driving necessary enhancements to maintain alignment. You will own the evolution of third‑party risk tooling and digital capabilities, including governance of TPRM platforms, onboarding workflows, data sources, and reporting infrastructure. You will drive the use of data, automation, and analytics to enhance scalability, transparency, and decision‑making. In addition to strategy development, you will lead execution of complex, global initiatives to enhance program capabilities, improve processes, and implement changes across the firm. You will play a key role in strengthening risk management capabilities, including supporting documentation, training, and fostering a strong risk‑aware culture. You will report to the Director of Third Party Risk Strategy and work closely with global stakeholders including Ethics & Compliance, Finance, Legal, Client Service Risk focused specifically on suppliers and client‑facing collaborators (CFCs) external entities the firm engages with to deliver products and services, including suppliers, and ecosystem partners. You will be based out of London, Philadelphia, New York, New Jersey, Atlanta, Boston, Miramar, Tampa, or Washington DC office.

YOUR GROWTH

You are someone who thrives in a high-performance environment, bringing a growth mindset and entrepreneurial spirit to tackle meaningful challenges that have a real impact. In return for your drive, determination, and curiosity, we’ll provide the resources, mentorship, and opportunities to help you quickly broaden your expertise, grow into a well‑rounded professional, and contribute to work that truly makes a difference. When you join us, you will have:

• Continuous learning:Our learning and apprenticeship culture, backed by structured programs, is all about helping you grow while creating an environment where feedback is clear, actionable, and focused on your development. The real magic happens when you take the input from others to heart and embrace the fast‑paced learning experience, owning your journey.
• A voice that matters:From day one, we value your ideas and contributions. You’ll make a tangible impact by offering innovative ideas and practical solutions, all while upholding our unwavering commitment to ethics and integrity. We not only encourage diverse perspectives, but they are critical in driving us toward the best possible outcomes.
• Global community:With colleagues across 65+ countries and over 100 different nationalities, our firm’s diversity fuels creativity and helps us come up with the best solutions. Plus, you’ll have the opportunity to learn from exceptional colleagues with diverse backgrounds and experiences.
• Exceptional benefits:On top of a competitive salary (based on your location, experience, and skills), we provide a comprehensive benefits package to enable holistic well‑being for you and your family.

YOUR QUALIFICATIONS AND SKILLS

• 10+ years in third-party risk management, compliance, or a related field, ideally within a global organization
• Deep expertise in third-party risk management frameworks, including lifecycle design, onboarding processes, and internal control environments across multiple third-party segments
• Experience designing, governing, or advancing enterprise risk programs, with accountability for program performance and outcomes, ideally in a professional services or consulting environment
• Strong understanding of global regulatory expectations and industry frameworks related to third-party risk (e.g., NIST, ISO, SOC, and relevant regulatory guidance)
• Experience with TPRM/GRC platforms and driving digital enablement, including workflow design, data, reporting, and automation
• Exceptional analytical and problem-solving skills, with the ability to translate complex data into actionable insights
• Excellent judgment and exceptional integrity, as well as distinctive interpersonal and collaborative skills
• Proven ability to lead large, cross-functional initiatives and drive execution in complex, global environments
• Curious mindset and demonstrated ability to learn new concepts and ideas, and to apply those concepts across multiple content areas
• Strong professional computing skills, including Microsoft Office products (i.e. Excel, PowerPoint, Visio)
• Comfortable with ambiguity in a work-setting, knowing how to address and manage unpredictable outcomes
• Superior communication & interpersonal skills, including the ability to present to a global audience on a regular basis, build and maintain highly effective and collaborative relationships

FOR U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.

Certain US jurisdictions require McKinsey & Company to include a reasonable estimate of the salary for this role.To help you understand what you can expect, the salary range for new joiners in this role in United States, including all office locations where the job may be performed, is $190,900 - $254,600 USD gross per year. This reflects our best estimate of the lowest to highest[salary/hourly wages] for this role at the time of this posting, ensuring you have a clear picture right from the start, though it's importantto remember that actual salaries may vary. Factors like your office location, your unique blend of experience and skills, start date and our currentorganizational needs all play a part in determining the final figure. Certain roles are also eligible for bonuses, subject to McKinsey's discretionand based on factors such as individual and/or organizational performance.

Additionally, we provide a comprehensive benefits package that reflects our commitment to the wellness of our colleagues and their families.This includes medical, mental health, dental and vision coverage, telemedicine services, life, accident and disability insurance, parental leave and family planning benefits, caregiving resources, a generous retirement contributions program, financial guidance,and paid time off.

FOR NON-U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity employer. For additional details regarding our global EEO policy and diversity initiatives, please visit our McKinsey Careers and Diversity & Inclusion sites.