Senior Vendor Risk & Security Manager

Socket.dev; United States; On-site; USD 95,000 - 136,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D

Job summary

Guild Mortgage Company is seeking a Third-Party Security Manager to lead the mature the TPRM program, overseeing onboarding, monitoring and offboarding of vendors. The role requires strong cybersecurity, risk management, and governance experience to communicate risk to technical and executive audiences.

The position is exempt with a targeted salary range and offers comprehensive benefits; collaboration with Legal, Procurement, Privacy, and Information Security teams is required to ensure

Qualifications

• Bachelor's degree or equivalent; preferred.
• Minimum five years' experience in risk management or security.
• Minimum three years supervisory or leadership experience.
• Excellent verbal and written communication skills.
• Highly organized and detail oriented in a fast-paced environment.
• Proficiency with Microsoft Office and third-party software.

Responsibilities

• Develop, maintain, and mature the Third-Party Risk Management framework, policies, standards and procedures.
• Establish risk-based onboarding, review, monitoring and offboarding processes for third parties.
• Define vendor risk assessment methodologies and risk scoring criteria.
• Ensure alignment with regulatory requirements and industry frameworks (NIST, SOC 2, ISO 27001, FFIEC, GLBA, PCI-DSS).
• Conduct risk assessments for vendors; review security documentation; identify control gaps and remediation plans.
• Develop and maintain TPRM dashboards, KPIs, and executive reporting; monitor vendor performance and risk trends.

Skills

Vendor governance

Risk management

Cybersecurity

Communication

Leadership

Education

Bachelor's degree in related field

Tools

Microsoft Office Suite

Job description

Guild Mortgage Company is seeking a Third-Party Security Manager to lead the mature the TPRM program, overseeing onboarding, monitoring and offboarding of vendors. The role requires strong cybersecurity, risk management, and governance experience to communicate risk to technical and executive audiences.

The position is exempt with a targeted salary range and offers comprehensive benefits; collaboration with Legal, Procurement, Privacy, and Information Security teams is required to ensure