Senior Vendor & Contract Manager

Princeton IT Services, Inc; Trenton (NJ); Hybrid; USD 120,000 - 150,000; Part time

Job summary

Princeton IT Services, Inc. in Trenton, NJ seeks a Senior Vendor & Contract Manager to lead enterprise-wide vendor compliance, third-party risk management, IT audit readiness, and technology governance.

You will supervise vendor risk assessments, audit remediation, and policy management across the technology ecosystem. The ideal candidate has extensive IT compliance, ITGC, audit governance, and regulatory security framework experience.

Qualifications

• Extensive experience in IT compliance and IT general controls (ITGC).
• Proven audit governance with remediation and evidence handling.
• Strong background in third-party risk management and regulatory security frameworks.

Responsibilities

• Lead Third-Party Risk Management (TPRM) including assessments, risk scoring, qualification, and ongoing monitoring.
• Oversee IT audit readiness and execution, reviewing SOC and ISO reports and attestations.
• Manage audit findings, root-cause analysis, corrective actions and supporting evidence.
• Draft, review, and maintain IT security, privacy, and governance policies and SOPs.
• Ensure alignment with NIST, ISO 27001, and regulatory requirements across systems and vendors.
• Enforce ITGCs, access governance, and data protection standards in internal and third-party environments.
• Collaborate with Legal and Procurement on vendor contracts, DPA, SLAs and audit rights.
• Develop executive risk dashboards, audit tracking, and compliance reporting for leadership.

Skills

IT compliance

ITGC

Audit governance

Third-party risk

NIST SP 800-53

ISO 27001

Policy management

Executive reporting

Education

Bachelor's degree

Job description

Location: Trenton, NJ

Work Model: Hybrid (3 Days Onsite)

Job Type: Contract

Job Summary

We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party risk management, IT audit readiness, and technology governance. This role will oversee vendor risk assessments, audit compliance, remediation activities, and IT security and privacy policy management across the organization s technology ecosystem.

Job Title: Senior Vendor & Contract Manager

Location: Trenton, NJ

Work Model: Hybrid (3 Days Onsite)

Job Type: Contract

Job Summary

We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party risk management, IT audit readiness, and technology governance. This role will oversee vendor risk assessments, audit compliance, remediation activities, and IT security and privacy policy management across the organization s technology ecosystem.

The ideal candidate will have extensive experience in IT compliance, IT General Controls (ITGC), audit governance, third-party risk management, and regulatory security frameworks. The individual will collaborate with IT, Legal, Procurement, and executive leadership to strengthen compliance, mitigate risks, and maintain audit readiness.

Responsibilities

• Lead Third-Party Risk Management (TPRM), including vendor assessments, risk scoring, qualification, and ongoing compliance monitoring.
• Oversee IT audit readiness and execution, reviewing SOC 1/SOC 2 Type II reports, ISO certifications, and independent security attestations.
• Manage audit findings and remediation activities, coordinating technical root-cause analysis, corrective action plans, and supporting evidence.
• Author, review, update, and maintain IT security, privacy, technology governance policies, standards, and standard operating procedures (SOPs).
• Ensure alignment with NIST frameworks, ISO 27001, and applicable state and federal regulatory requirements.
• Enforce IT General Controls (ITGC), access governance, and data protection requirements across internal systems and third-party vendor environments.
• Partner with Legal and Procurement to review and manage compliance exhibits, Data Processing and Data Sharing Agreements, Service Level Agreements (SLAs), and right-to-audit clauses.
• Develop and maintain executive risk scorecards, audit tracking dashboards, and compliance reporting.
• Advise the CIO on enterprise compliance posture, emerging risks, audit results, and risk mitigation strategies.
• Coordinate with IT and business teams to monitor compliance obligations and implement corrective measures.
• Maintain documentation and evidence supporting internal and external audits.
• Monitor vendor compliance and support continuous improvement of governance and risk management processes.

Required Skills And Experience

• 8+ years of experience in IT compliance, IT General Controls (ITGC), and audit governance within enterprise environments.
• Experience authoring and updating enterprise IT security, governance, and regulatory compliance policies.
• Experience managing audit finding remediation, technical root-cause analysis, and corrective action plans.
• Experience working with NIST security frameworks, including NIST SP 800-53 and NIST Cybersecurity Framework (CSF), and ISO 27001.
• Strong technical understanding of ITGC, access governance, data protection, and enterprise compliance controls.
• Experience presenting compliance status, risk metrics, and audit findings to executive leadership.
• Strong analytical, documentation, communication, and stakeholder management skills.

Preferred Qualifications

• Experience in Third-Party Risk Management (TPRM) and cloud/SaaS vendor qualification.
• Experience evaluating SOC 1/SOC 2 Type II reports and independent security attestations.
• Experience working with cloud providers, software vendors, system integrators, and other third-party technology partners.
• Experience collaborating with Legal and Procurement on vendor contracts, data protection agreements, SLAs, and audit rights.
• Experience developing executive compliance dashboards, risk scorecards, and remediation tracking reports.
• Bachelor s degree required.