Senior TPRM & Security Lead

Gong; Chicago (IL); On-site; USD 117,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

Wellbeing Fund

Mental Health benefits

401(k) program

Education & learning stipend

Flexible vacation time

Paid parental leave

Company-wide recharge days

Work from home stipend

Job summary

Gong is seeking an experienced Third Party Risk Manager to lead and mature our vendor risk program within the GRC team. You will own end-to-end risk lifecycle, establish baselines, and implement scalable controls across vendors, partnerships, and processing agreements.

You will collaborate with Procurement, Legal, Security, and Privacy to embed risk requirements, monitor ongoing risk, and drive remediation. This role emphasizes hands-on leadership and strategic governance.

Qualifications

• 7+ years of experience in third-party/vendor risk management or related field.
• Ability to establish baselines and risk-based vendor reviews.
• Knowledge of SOC 2, ISO 27001, NIST and privacy regulations.
• Experience reviewing SOC 2 reports, pen tests, and questionnaires.
• Strong cross-functional collaboration and communication skills.
• Familiarity with TPRM tooling (Zip).

Responsibilities

• Own the end-to-end third-party risk lifecycle including intake, due diligence, risk assessment, onboarding, ongoing monitoring, and offboarding.
• Establish baselines and controls to reduce and manage third-party risk across the vendor portfolio.
• Apply a risk-based approach to vendor reviews, tiering vendors based on risk and data sensitivity.
• Build a scalable TPRM program aligned with Gong’s growth.
• Communicate findings and remediation requirements clearly to stakeholders.
• Partner with Procurement and Legal to embed risk requirements into contracts and data processing agreements.
• Maintain and enhance TPRM framework, policies, and procedures with SOC 2, ISO 27001, and privacy regulations.
• Manage continuous monitoring and remediation tracking for vendors.
• Administer TPRM tooling and automation to scale the program.
• Report on third-party risk posture and trends to GRC leadership.

Skills

Vendor risk management

Cross-functional collaboration

Security & privacy compliance

Communication skills

Education

CTPRP, CISA, CISSP, CRISC certifications

Tools

Zip

Job description

Gong is seeking an experienced Third Party Risk Manager to lead and mature our vendor risk program within the GRC team. You will own end-to-end risk lifecycle, establish baselines, and implement scalable controls across vendors, partnerships, and processing agreements.

You will collaborate with Procurement, Legal, Security, and Privacy to embed risk requirements, monitor ongoing risk, and drive remediation. This role emphasizes hands-on leadership and strategic governance.