Third Party Cyber Risk Manager

Techgene Solutions; Princeton (NJ); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading technology firm is seeking a TPCRM Risk Manager in Princeton, NJ, responsible for managing cyber risk, security standards, and audit processes to ensure secure collaboration with third-party vendors. The ideal candidate has over 5 years of experience in risk management, familiarity with compliance frameworks, and strong vendor management skills. This full-time position offers a dynamic work environment with significant impact on organizational security. Certifications such as CISA, CRISC, and CISSP are preferred.

Qualifications

• 5+ years in TPCRM security and risk management, preferably in Pharma/Biotech.
• Certifications in CISA, CRISC, CISM, CISSP are essential.
• Familiarity with ISO, NIST, GDPR, SOX, HIPAA frameworks is required.

Responsibilities

• Develop and maintain security standards and documentation.
• Assess third-party security risks and monitor vendors.
• Implement tools for risk monitoring and reporting.
• Design and deploy cyber risk audit services by 2026.

Skills

Vendor management

Compliance frameworks knowledge

Communication skills

Analytical skills

Organizational skills

Risk assessment leadership

Soft skills: negotiation

Soft skills: facilitation

Soft skills: relationship-building

Education

Bachelor’s in Computer Science or equivalent

Tools

ServiceNow

Archer

Job description

Role Overview

The TPCRM Risk Manager ensures secure and compliant collaboration with third-party vendors by managing cyber risk, security standards, and audit processes. This position combines technical expertise and business acumen to safeguard sensitive data and maintain trust between Genmab DD&AI and its partners.

Key Responsibilities

Security

• Develop and maintain TPCRM security standards, metrics, and documentation.
• Continuously assess third-party security risks and monitor vendor landscape.
• Implement tools for ongoing risk monitoring and reporting.
• Align TPCRM operations with Danish NIS2 Act and ensure supplier assessments/reassessments by end of 2026.
• Collaborate with Procurement, Legal, Privacy, QA, and DD&AI to update security requirements.

Audit

• Design and deploy cyber risk audit services by 2026.
• Define audit priorities and execute audit calendar for short- and long-term plans.
• Integrate audit results into dashboards and maintain strong relationships with key stakeholders.

Timeline

Full-time role (40 hrs/week) with a 12-month hiring period.

Primary Stakeholders

• Security Officers (US, DK, NL, JP, CN)
• Solution Architects
• Business Owners
• Data Protection Officer
• Legal
• Global Procurement
• DD&AI Leadership
• Head of IT Security & Risk Management

Qualifications

• Education: Bachelor’s in Computer Science, MIS, or equivalent experience.
• 5+ years in TPCRM security and risk management (Pharma/Biotech preferred).
• Certifications: CISA, CRISC, CISM, CISSP.
• Familiarity with frameworks (ISO, NIST, GDPR, SOX, HIPAA) and GRC tools (ServiceNow, Archer, etc.).
• Proven ability to implement security processes and improvement roadmaps.

Skills

• Strong knowledge of vendor management and compliance frameworks (SOC 1/2, FISMA, GDPR, NIST, GxP).
• Excellent communication, analytical, and organizational skills.
• Ability to lead risk assessments, security improvements, and audit remediation.
• Proficiency in KPIs/KRIs reporting and collaboration across global teams.
• Soft skills: negotiation, facilitation, relationship-building.