Senior Third-Party Risk & Vendor Lead

Bath & Body Works; Columbus (OH); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Robust medical coverage

Dental, vision, and pharmacy coverage

Onsite wellness center

Employee Assistance Program (EAP)

401(k) with company match

Associate Stock Purchase Program

Paid time off and parental leave

Discount on Bath & Body Works products

Job summary

Bath & Body Works seeks an experienced vendor risk and procurement professional to lead third‑party risk programs from our Columbus, OH office. You will embed risk controls across the vendor lifecycle, perform due diligence, and support regulatory exams and internal audits.

Ideal candidates have 7+ years in vendor risk, compliance or cybersecurity, and hands-on experience with GRC platforms. Strong communication to executives is essential to drive risk‑aware decisions.

Qualifications

• 7+ years’ experience in vendor management, risk management, procurement, compliance, or cybersecurity.
• Strong understanding of third‑party risk frameworks.
• Experience working with vendor management or GRC platforms.
• Ability to analyze complex issues, summarize risk findings, and communicate to executive audiences.

Responsibilities

• Partner with Procurement, Legal, Information Security, Compliance partners, ERM and business units to embed risk controls throughout the vendor lifecycle.
• Support maintaining a centralized inventory of third‑party relationships and ensure proper risk classification.
• Help facilitate end‑to‑end third‑party risk assessments, including onboarding due diligence, periodic reviews, and offboarding evaluations.
• Assess vendor controls related to information security, data privacy, operational resilience, financial health, and regulatory compliance.
• Support the implementation of continuous monitoring processes for high‑risk and critical vendors.
• Support regulatory exams, internal audits, and cross‑functional compliance initiatives.
• Support third‑party incident reporting, critical issue, and remediation processes.
• Support root‑cause analysis for vendor‑related operational or security issues as appropriate.
• Prepare timely documentation and communication of third‑party risk issues affecting business operations.
• Provide subject matter expertise on third‑party risk across the company.
• Provide training and guidance to business partners on risk assessment processes and vendor management standards.
• Build strong relationships with internal and external partners.

Skills

Vendor management

Risk assessment

Procurement

Compliance

Cybersecurity

Education

Bachelor’s Degree in a related field

Tools

GRC platforms

Job description

Bath & Body Works seeks an experienced vendor risk and procurement professional to lead third‑party risk programs from our Columbus, OH office. You will embed risk controls across the vendor lifecycle, perform due diligence, and support regulatory exams and internal audits.

Ideal candidates have 7+ years in vendor risk, compliance or cybersecurity, and hands-on experience with GRC platforms. Strong communication to executives is essential to drive risk‑aware decisions.