Senior Third-Party Risk & Security Manager

Guild Mortgage; United States; Remote; USD 95,000 - 136,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

401(k) with employer match

Vision Insurance

Job summary

Guild Mortgage Company is seeking a Third-Party Security Manager in the United States to lead and mature the TPRM program, overseeing vendor risk assessments, monitoring, and mitigation efforts across the organization.

The role works closely with Information Security, Legal, Compliance, Procurement, Privacy, and Enterprise Risk Management to ensure vendor relationships meet regulatory requirements and security standards, communicating risk to both technical and executive audiences.

Qualifications

• Five or more years of experience in risk management or a related field.
• Strong verbal and written communication skills.
• Demonstrated ability to lead, mentor, and coordinate cross-functional teams.

Responsibilities

• Develop, maintain, and improve the Third-Party Risk Management (TPRM) framework, policies, standards, and procedures.
• Define vendor risk assessment methodologies and risk scoring criteria.
• Monitor and assess vendor security, privacy, and compliance reports and controls.
• Collaborate with Legal, Procurement, and Information Security on vendor contracts and onboarding.
• Provide regular risk reporting to leadership and audit committees.

Skills

Five years experience

Verbal and written communication

Organized and detail-oriented

Microsoft Office Proficiency

Leadership experience

Commitment to company values

Education

Bachelor's degree or equivalent

Job description

Guild Mortgage Company is seeking a Third-Party Security Manager in the United States to lead and mature the TPRM program, overseeing vendor risk assessments, monitoring, and mitigation efforts across the organization.

The role works closely with Information Security, Legal, Compliance, Procurement, Privacy, and Enterprise Risk Management to ensure vendor relationships meet regulatory requirements and security standards, communicating risk to both technical and executive audiences.