Senior Vendor Risk & Compliance Manager

Princeton IT Services, Inc; Trenton (NJ); Hybrid; USD 120,000 - 150,000; Part time

Job summary

Princeton IT Services, Inc. in Trenton, NJ seeks a Senior Vendor & Contract Manager to lead enterprise-wide vendor compliance, third-party risk management, IT audit readiness, and technology governance.

You will supervise vendor risk assessments, audit remediation, and policy management across the technology ecosystem. The ideal candidate has extensive IT compliance, ITGC, audit governance, and regulatory security framework experience.

Qualifications

• Extensive experience in IT compliance and IT general controls (ITGC).
• Proven audit governance with remediation and evidence handling.
• Strong background in third-party risk management and regulatory security frameworks.

Responsibilities

• Lead Third-Party Risk Management (TPRM) including assessments, risk scoring, qualification, and ongoing monitoring.
• Oversee IT audit readiness and execution, reviewing SOC and ISO reports and attestations.
• Manage audit findings, root-cause analysis, corrective actions and supporting evidence.
• Draft, review, and maintain IT security, privacy, and governance policies and SOPs.
• Ensure alignment with NIST, ISO 27001, and regulatory requirements across systems and vendors.
• Enforce ITGCs, access governance, and data protection standards in internal and third-party environments.
• Collaborate with Legal and Procurement on vendor contracts, DPA, SLAs and audit rights.
• Develop executive risk dashboards, audit tracking, and compliance reporting for leadership.

Skills

IT compliance

ITGC

Audit governance

Third-party risk

NIST SP 800-53

ISO 27001

Policy management

Executive reporting

Education

Bachelor's degree

Job description

Princeton IT Services, Inc. in Trenton, NJ seeks a Senior Vendor & Contract Manager to lead enterprise-wide vendor compliance, third-party risk management, IT audit readiness, and technology governance.

You will supervise vendor risk assessments, audit remediation, and policy management across the technology ecosystem. The ideal candidate has extensive IT compliance, ITGC, audit governance, and regulatory security framework experience.