Senior Third-Party Risk Manager (TPRM)

BoF Careers; Nutley (NJ); On-site; USD 150,000 - 190,000; Full time

Job summary

Ralph Lauren Corporation seeks a Third-Party Risk Management (TPRM) manager to lead and mature the vendor risk program across the lifecycle. You will partner with Procurement, Legal, Privacy, Information Security, Internal Audit and business units to assess, monitor, and mitigate third-party risks in line with regulatory and business requirements.

Responsibilities include establishing governance, KPIs, risk assessments, and reporting; driving automation and process improvements; and guiding risk

Qualifications

• 7+ years in Information Security, IT Risk Management, Cybersecurity, Compliance, Internal Audit, or TPRM.
• 3+ years leading TPRM programs or teams.
• Experience evaluating controls against ISO 27001, NIST, SOC 1/2, PCI DSS, and privacy regulations.

Responsibilities

• Lead day-to-day execution of the Third-Party Risk Management program.
• Maintain and enhance TPRM policies, standards, procedures, and governance frameworks.
• Drive program maturity, automation initiatives, and process optimization.
• Establish and monitor TPRM KPIs, KRIs, SLAs, and reporting metrics.
• Lead risk assessments of new and existing third-party providers.
• Review security documentation and certifications (SIG, SOC, ISO).
• Document findings and provide remediation recommendations.
• Present significant third-party risks to senior leadership.

Skills

Vendor risk assessment

Risk analysis

Stakeholder management

Executive reporting

GRC platforms

Education

Bachelor's degree in Information Security, Cybersecurity, IT, Risk Management

Tools

OneTrust

ServiceNow

Archer

ProcessUnity

AuditBoard

Job description

Ralph Lauren Corporation seeks a Third-Party Risk Management (TPRM) manager to lead and mature the vendor risk program across the lifecycle. You will partner with Procurement, Legal, Privacy, Information Security, Internal Audit and business units to assess, monitor, and mitigate third-party risks in line with regulatory and business requirements.

Responsibilities include establishing governance, KPIs, risk assessments, and reporting; driving automation and process improvements; and guiding risk