Senior TPRM Lead | AI-Driven Risk & Vendor Programs

CrowdStrike Inc.; Santa Fe (NM); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Compensation & equity

Wellness programs

Vacation & holidays

Parental leave

Professional development

Employee networks

Office culture

Job summary

CrowdStrike is seeking a Lead, Third Party Risk Management (TPRM) to drive strategy, architecture and execution of our vendor risk program. You will architect workflows in ServiceNow, champion AI-driven risk scoring, and lead automation to improve efficiency in a fast-paced security environment.

The role requires deep TPRM experience, strong governance knowledge, and the ability to translate technical risk into business terms for leadership.

Qualifications

• 10+ years of experience in Third Party Risk Management, GRC, information security risk, or related technical controls disciplines.
• Hands-on administrative or architectural experience with the ServiceNow Third Party Risk Management (TPRM) module.
• 3+ years of experience acting as a technical lead, process architect, or principal SME driving operational efficiency and automation within a risk or compliance program.
• Strong, practical understanding of security and compliance frameworks, including NIST CSF, CSA’s CCM, ISO 27001, SOC 2, NIST 800-53, and/or SIG or CAIQ
• Experience with AI/ML tools and adapting them into GRC workflows.
• Proven project-management experience with complex technical implementations.

Responsibilities

• System, Tooling & AI Architecture: Serve as the functional owner, technical architect, and principal SME for ServiceNow as the TPRM platform of record.
• Operational Leadership: Manage day-to-day operations of the TPRM assessment pipeline, SLA tracking, and final approvals for vendor assessments.
• Process Engineering & Automation: Lead automation within ServiceNow to reduce manual effort.
• Program Design: Architect end-to-end vendor risk lifecycle to apply TPRM standards.
• Agile Development: Manage story creation and oversee sprint and epic development.
• Cross-Functional Integration: Partner with Procurement, Legal, IT, and Security to embed risk checks.
• Audit & Controls: Oversee third‑party evaluations and support audits.
• Standards & Frameworks: Develop TPRM policies aligned with NIST, ISO 27001, SOC 2, etc.
• Metrics & Reporting: Build dashboards to show program maturity.

Skills

TPRM expertise

ServiceNow TPRM

Technical leadership

Security frameworks (NIST ISO SOC2)

AI/ML in GRC

Project management

Stakeholder communication

Adaptability

Tools

ServiceNow

Job description

CrowdStrike is seeking a Lead, Third Party Risk Management (TPRM) to drive strategy, architecture and execution of our vendor risk program. You will architect workflows in ServiceNow, champion AI-driven risk scoring, and lead automation to improve efficiency in a fast-paced security environment.

The role requires deep TPRM experience, strong governance knowledge, and the ability to translate technical risk into business terms for leadership.