Senior TPRM & GRC Lead — Vendor Risk & Compliance

Yoh Services LLC; McKinney (TX); Hybrid; USD 69,000 - 90,000; Full time

Job summary

Yoh Services LLC is seeking a Senior TPRM and GRC Consultant to lead the third-party risk program in a hybrid role based in Plano or McKinney, TX. Immediate start with 2-3 days onsite.

The ideal candidate will manage the full TPRM lifecycle, conduct due diligence and risk assessments, and partner with Legal, Procurement, and Information Security to strengthen controls. Experience with AuditBoard or RSA Archer is preferred; strong communication skills are essential for senior leadership reporting

Qualifications

• Five+ years in IT security, cyber risk, or GRC focusing on third-party risk management.
• Experience managing vendor onboarding, due diligence, risk assessments, remediation tracking, and offboarding.
• Knowledge of NIST, ISO 27001, SOC 2, PCI DSS, HIPAA, and CCPA.
• Hands-on with AuditBoard or RSA Archer or similar GRC platforms.
• Experience collaborating with Procurement, Legal, Compliance, Information Security, and business stakeholders.
• Strong analytical, documentation, reporting, and stakeholder-management abilities.
• Ability to work onsite Wednesday–Friday.

Responsibilities

• Lead end-to-end TPRM lifecycle for new and existing vendors.
• Conduct vendor due diligence, security risk assessments, and control reviews.
• Evaluate vendor compliance with security requirements and regulatory standards.
• Identify gaps, document findings, and track remediation to completion.
• Develop and improve TPRM policies, procedures, and workflows.
• Collaborate with Procurement, Legal, and IT Security to embed security in contracting.
• Maintain AuditBoard or RSA Archer for assessments and reporting.
• Monitor risk metrics and remediation progress for leadership.

Skills

Vendor Risk Mgmt

Stakeholder Mgmt

Analytical Skills

Education

None

Tools

AuditBoard

RSA Archer

Job description

Yoh Services LLC is seeking a Senior TPRM and GRC Consultant to lead the third-party risk program in a hybrid role based in Plano or McKinney, TX. Immediate start with 2-3 days onsite.

The ideal candidate will manage the full TPRM lifecycle, conduct due diligence and risk assessments, and partner with Legal, Procurement, and Information Security to strengthen controls. Experience with AuditBoard or RSA Archer is preferred; strong communication skills are essential for senior leadership reporting