Strategic IT Third-Party Risk Lead - Remote

bankerstoolbox; Raleigh (NC); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits with HSA

Flexible PTO

401(k) plan with company match

Bonus structure

Job summary

Abrigo is seeking an IT Third-Party Risk Manager to lead the Third-Party Risk Management Program. The role oversees risk operations, audit readiness, governance, and continuous improvement, reporting to the VP IT Risk & Assurance within the CISO organization.

Remote-first, based in Raleigh with quarterly onsite engagements. You will coordinate vendor onboarding, review security documentation, maintain records, and develop risk metrics while collaborating with Information Security, Technology,

Qualifications

• 4+ years of IT risk assessment and/or IT audit experience.
• Ability to read and interpret audit reports (SOC 1, SOC 2) and security assessments.
• Strong written and verbal communication across management levels.
• Familiarity with information security standards and laws (NIST/FFIEC/GLBA).

Responsibilities

• Lead operational administration of the Third-Party Risk Management Program.
• Coordinate vendor onboarding, risk reviews, due diligence, and reassessments.
• Review vendor security docs (SOC reports, policies, risk assessments) and determine actions.
• Maintain vendor records and supporting documentation in governance platforms.
• Monitor schedules, risk treatment, contracts, and remediation efforts.
• Assist in metrics, dashboards, and reporting on risk and audits.
• Research new technologies to improve risk assessment processes.
• Act as SME on risk threats and mitigations.
• Update policies, training materials, and playbooks; support continuous improvement.
• Assist with customer assurance materials and security responses for third-party activities.
• Support audit cycles with evidence collection and issue management.
• Occasional travel for team events and engagements.

Skills

IT risk assessment

IT audit

Communication

Documentation & reporting

Regulatory compliance knowledge

Education

CRVPM

TPCRA

CISA

CRISC

Job description

Abrigo is seeking an IT Third-Party Risk Manager to lead the Third-Party Risk Management Program. The role oversees risk operations, audit readiness, governance, and continuous improvement, reporting to the VP IT Risk & Assurance within the CISO organization.

Remote-first, based in Raleigh with quarterly onsite engagements. You will coordinate vendor onboarding, review security documentation, maintain records, and develop risk metrics while collaborating with Information Security, Technology,