Senior TPRM Lead - AI-Driven Risk & GRC (Remote)

CrowdStrike Inc.; Annapolis (MD); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market leader in compensation and息equ

Comprehensive physical and mental well

Competitive vacation and holidays for…

Paid parental and adoption leaves

Professional development opportunities

Employee Networks and volunteer opps

Vibrant office culture with world‑‑‑ac

Great Place to Work Certified

Job summary

CrowdStrike is seeking an experienced Lead, Third Party Risk Management (TPRM) to drive strategy, architecture, and technical execution of our vendor risk program. This role sits within the GRC organization and focuses on scalable risk practices across a fast-paced security environment.

You’ll architect ServiceNow TPRM workflows, lead automation efforts, and serve as the SME for vendor risk assessments while aligning with NIST, ISO 27001, SOC 2, and related frameworks.

Qualifications

• Deep hands-on TPRM knowledge with enterprise tooling.
• Experience leading technical risk programs and automation.
• Familiarity with security/compliance frameworks and audits.

Responsibilities

• Architect ServiceNow TPRM workflows and AI-driven risk scoring.
• Lead day-to-day TPRM operations and SLA tracking.
• Automate processes within ServiceNow to reduce manual effort.
• Design end-to-end vendor risk lifecycle from onboarding to offboarding.
• Own agile story creation and liaison with development teams.
• Collaborate with Procurement, Legal, IT, and Security.
• Oversee third-party control evaluations and audits.
• Develop and maintain TPRM policies aligned with standards.
• Build KPI dashboards for leadership.

Skills

TPRM expertise

Technical leadership

Security frameworks

Stakeholder communication

Agile/project management

AI/ML in GRC

Vendor risk lifecycle

Tools

ServiceNow

Job description

CrowdStrike is seeking an experienced Lead, Third Party Risk Management (TPRM) to drive strategy, architecture, and technical execution of our vendor risk program. This role sits within the GRC organization and focuses on scalable risk practices across a fast-paced security environment.

You’ll architect ServiceNow TPRM workflows, lead automation efforts, and serve as the SME for vendor risk assessments while aligning with NIST, ISO 27001, SOC 2, and related frameworks.