Senior TPRM Technical Program Manager — Cloud Security

CoreWeave; New York (NY); On-site; USD 157,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Life Insurance

401(k) with match

Flexible PTO

Tuition Reimbursement

Employee Stock Purchase Program (ESPP)

Job summary

CoreWeave is seeking a TPRM Technical Program Manager to build and mature a vendor risk program across engineering, procurement, IT, and Legal. This hands-on role partners with cross-functional teams to assess controls, contract requirements, and evidence; track findings to closure and drive remediation.

The ideal candidate has 2+ years in TPRM, a security or CS degree, and certifications such as CISA, CISSP.

Qualifications

• 2+ years of hands-on experience in Third Party Risk Management and maturing a TPRM program.
• Bachelor’s degree in Information Security, CS, or equivalent.
• Security certification such as CISA, CRISC, CISSP, or CTPRP.
• Knowledge of security control frameworks and evaluating compliance docs.
• Experience evaluating third party risk assessments and remediation tracking.
• Ability to maintain records in a GRC/TPRM platform.
• Strong written and verbal communication across audiences.”

Responsibilities

• Contribute to TPRM strategy and roadmap across security and business goals.
• Oversee third party security risk assessments and contract requirements.
• Track findings to closure with remediation timelines.
• Perform vendor reassessments according to a tiered cadence.
• Maintain vendor inventory and risk register in the TPRM platform.
• Refine assessment questionnaires and program documentation.
• Tailor communications to diverse audiences.

Skills

TPRM experience

stakeholder communication

risk assessment

vendor management

Education

Bachelor's degree in Information Security or Computer Science

Tools

GRC platform

Job description

CoreWeave is seeking a TPRM Technical Program Manager to build and mature a vendor risk program across engineering, procurement, IT, and Legal. This hands-on role partners with cross-functional teams to assess controls, contract requirements, and evidence; track findings to closure and drive remediation.

The ideal candidate has 2+ years in TPRM, a security or CS degree, and certifications such as CISA, CISSP.