Senior Vendor and Contract Manager

vTech Solution; Trenton (NJ); Hybride; USD 140 000 - 190 000; Plein temps

Résumé du poste

vTech Solution is seeking a Senior Vendor & Contract Manager to oversee third-party risk management, IT audit readiness, and policy lifecycle management. The role reports to the CIO and ensures enterprise compliance with NIST, SOC, and ISO frameworks.

You will manage vendor compliance across cloud providers, software vendors, and system integrators while aligning public sector systems with established IT security baselines.

Qualifications

• Minimum 8 years of experience in IT compliance and third-party risk management within large enterprise environments.
• Experience authoring and operationalizing enterprise IT security, governance, and regulatory policies.
• Strong ability to evaluate SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Proven track record in audit remediation, root-cause analysis, and action plan development.
• Familiarity with NIST SP 800-53 / Cybersecurity Framework and ISO 27001 security standards.
• Bachelor's degree or equivalent educational qualification.

Responsabilités

• Lead third-party risk management by establishing vendor vetting, risk scoring, and continuous compliance monitoring.
• Oversee IT audit readiness and execution, including evaluation of SOC 1/SOC 2 Type II reports, ISO certifications, and third-party control attestations.
• Manage remediation lifecycles by conducting root-cause analyses and verifying evidence to close audit findings.
• Author, update, and maintain IT security, privacy, and governance policies, standards, and SOPs aligned with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal and vendor environments.
• Collaborate with Legal and Procurement teams to review and enforce compliance exhibits, data processing agreements, SLAs, and audit rights.
• Advise the CIO on enterprise compliance posture through executive risk scorecards, audit tracking dashboards, and mitigation strategies.

Connaissances

IT compliance

Third-party risk management

Audit governance

Policy development

NIST/ISO control frameworks

Vendor management

Executive communication

Formation

Bachelor's degree or equivalent

Description du poste

Job Summary

The Senior Vendor & Contract Manager is a key leadership role reporting directly to the Chief Information Officer (CIO). This position is responsible for overseeing third-party risk management, IT audit readiness, remediation activities, and policy lifecycle management to ensure enterprise compliance with industry standards such as NIST, SOC, and ISO frameworks. The role involves managing vendor compliance across cloud providers, software vendors, and system integrators while aligning public sector systems with established IT security baselines.

Responsibilities

• Lead third-party risk management by establishing vendor vetting, risk scoring, and continuous compliance monitoring.
• Oversee IT audit readiness and execution, including evaluation of SOC 1/SOC 2 Type II reports, ISO certifications, and third-party control attestations.
• Manage remediation lifecycles by conducting root-cause analyses and verifying evidence to close audit findings.
• Author, update, and maintain IT security, privacy, and governance policies, standards, and SOPs aligned with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal and vendor environments.
• Collaborate with Legal and Procurement teams to review and enforce compliance exhibits, data processing agreements, SLAs, and audit rights.
• Advise the CIO on enterprise compliance posture through executive risk scorecards, audit tracking dashboards, and mitigation strategies.

Required Skills & Certifications

• Minimum 8 years of experience in IT compliance, third-party risk management, and audit governance within large enterprise environments.
• Proven expertise in authoring and operationalizing enterprise IT security, governance, and regulatory policies.
• Strong technical knowledge of evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
• Experience with audit finding remediation, technical root-cause analysis, and action plan development.
• Alignment with NIST SP 800-53 / Cybersecurity Framework (CSF) and ISO 27001 security standards.
• Bachelor s degree or equivalent educational qualification.

Preferred Skills & Certifications

• Experience in third-party risk management (TPRM) and cloud/SaaS vendor qualification.
• Familiarity with independent security attestations and vendor compliance evaluations.
• Strong communication skills for presenting risk metrics and compliance status to executive leadership.

Special Considerations

• Position requires adherence to strict absence policies; absences longer than two weeks must be approved in advance.
• Candidate must be reachable during any approved absence period.
• Compliance with client s right to dismiss if the resource does not return by the agreed date.

Scheduling

• Hybrid work model with 3 days onsite and 2 days remote per week.
• Interview process includes a web cam interview and may require in-person interview availability.