Senior Third-Party Risk & Data Security PM

CoreWeave; Livingston (NJ); On-site; USD 157,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Equity awards

401(k) with employer match

Flexible PTO

Tuition reimbursement

ESPP

Parental leave

Lunch provided at office

Job summary

CoreWeave seeks a seasoned TPRM Technical Program Manager to govern external data sharing and supplier risk across products and operations. You will coordinate with engineering, procurement, IT, and Legal to implement controls, oversight, and remediation for data sharing practices.

You will drive metrics, contribute to risk strategy, and communicate complex concepts to technical and executive audiences, enabling secure and compliant cloud solutions.

Qualifications

• 5+ years in third-party risk management or data governance with external data sharing focus.
• Experience building data inventories including data classification and transfer mechanisms.
• Hands-on in third-party security risk assessments and control evaluations.
• Familiarity with privacy regulations (GDPR, CCPA/CPRA) and transfer mechanisms (SCCs, DPAs).
• Ability to design repeatable review workflows and report metrics to leadership.

Responsibilities

• Maintain a complete register of external data shares, including categories, purpose, legal basis, transfers, and restrictions.
• Define controls for onboarding external shares: pre‑share review, minimization, approved transfers, documented approvals.
• Monitor data flows for undocumented or out‑of‑scope sharing and drive remediation.
• Establish metrics and reporting on data mapping coverage and external sharing risk.
• Contribute to the TPRM strategy and road map with alignment to security and privacy goals.
• Lead third‑party security risk assessments including contract and compliance artifacts.
• Act as SME for TPRM & Privacy risks and communicate with technical and executive audiences.
• Tailor communications to diverse audiences and adapt messaging to depth of technical detail.

Skills

TPRM

Data governance

Privacy compliance

Security risk assessments

Data inventories

Tools

SQL

Python

Scripting

Job description

CoreWeave seeks a seasoned TPRM Technical Program Manager to govern external data sharing and supplier risk across products and operations. You will coordinate with engineering, procurement, IT, and Legal to implement controls, oversight, and remediation for data sharing practices.

You will drive metrics, contribute to risk strategy, and communicate complex concepts to technical and executive audiences, enabling secure and compliant cloud solutions.