Senior TPRM Lead — AI-Driven Vendor Risk, Remote

CrowdStrike Inc.; Trenton (NJ); Remote; USD 125,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation & equity

Wellness programs

Paid vacation & holidays

Parental & adoption leaves

Professional development

Employee networks

Vibrant office culture

Job summary

CrowdStrike, a global cybersecurity leader, seeks a Lead, Third Party Risk Management to drive strategy, architecture, and execution of our vendor risk program. This role sits in the GRC organization and protects customers through rigorous risk practices and scalable, automated workflows.

You will design workflows in ServiceNow, automate risk scoring, and oversee the assessment pipeline while collaborating with Procurement, Legal, IT and Security.

Qualifications

• 10+ years in Third Party Risk Management or related risk disciplines.
• Hands-on experience with the ServiceNow TPRM module.
• 3+ years as a technical lead driving automation.
• Strong understanding of security/compliance frameworks (NIST CSF, ISO 27001, SOC 2).
• Experience evaluating AI/ML tools within GRC workflows.
• Proven project management of complex technical implementations.

Responsibilities

• Own ServiceNow TPRM platform architecture and configurations.
• Lead operational management of the TPRM assessment pipeline.
• Develop automation within ServiceNow to reduce manual effort.
• Design end-to-end vendor risk lifecycle for scalable risk application.
• Manage story creation, liaison with development, oversee sprints.
• Partner with Procurement, Legal, IT, and Security to embed risk checks.
• Oversee third-party control evaluations and audits.
• Maintain TPRM policies aligned to standards (NIST, ISO 27001, SOC 2).
• Engineer KPIs and dashboards for leadership.

Skills

TPRM expertise

ServiceNow TPRM

Technical leadership

Framework fluency

AI/ML in GRC

Tools

ServiceNow TPRM module

Job description

CrowdStrike, a global cybersecurity leader, seeks a Lead, Third Party Risk Management to drive strategy, architecture, and execution of our vendor risk program. This role sits in the GRC organization and protects customers through rigorous risk practices and scalable, automated workflows.

You will design workflows in ServiceNow, automate risk scoring, and oversee the assessment pipeline while collaborating with Procurement, Legal, IT and Security.