Third-Party Risk Management (TPRM) Program Manager

Bath & Body Works; Columbus (OH); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Robust medical coverage

Dental, vision, and pharmacy coverage

Onsite wellness center

Employee Assistance Program (EAP)

401(k) with company match

Associate Stock Purchase Program

Paid time off and parental leave

Discount on Bath & Body Works products

Job summary

Bath & Body Works seeks an experienced vendor risk and procurement professional to lead third‑party risk programs from our Columbus, OH office. You will embed risk controls across the vendor lifecycle, perform due diligence, and support regulatory exams and internal audits.

Ideal candidates have 7+ years in vendor risk, compliance or cybersecurity, and hands-on experience with GRC platforms. Strong communication to executives is essential to drive risk‑aware decisions.

Qualifications

• 7+ years’ experience in vendor management, risk management, procurement, compliance, or cybersecurity.
• Strong understanding of third‑party risk frameworks.
• Experience working with vendor management or GRC platforms.
• Ability to analyze complex issues, summarize risk findings, and communicate to executive audiences.

Responsibilities

• Partner with Procurement, Legal, Information Security, Compliance partners, ERM and business units to embed risk controls throughout the vendor lifecycle.
• Support maintaining a centralized inventory of third‑party relationships and ensure proper risk classification.
• Help facilitate end‑to‑end third‑party risk assessments, including onboarding due diligence, periodic reviews, and offboarding evaluations.
• Assess vendor controls related to information security, data privacy, operational resilience, financial health, and regulatory compliance.
• Support the implementation of continuous monitoring processes for high‑risk and critical vendors.
• Support regulatory exams, internal audits, and cross‑functional compliance initiatives.
• Support third‑party incident reporting, critical issue, and remediation processes.
• Support root‑cause analysis for vendor‑related operational or security issues as appropriate.
• Prepare timely documentation and communication of third‑party risk issues affecting business operations.
• Provide subject matter expertise on third‑party risk across the company.
• Provide training and guidance to business partners on risk assessment processes and vendor management standards.
• Build strong relationships with internal and external partners.

Skills

Vendor management

Risk assessment

Procurement

Compliance

Cybersecurity

Education

Bachelor’s Degree in a related field

Tools

GRC platforms

Job description

At Bath & Body Works, we believe everybody deserves to feel good. When you join us, you're part of more than an iconic fragrance and personal care brand — you become part of Gingham Nation, where people are at the center of everything we do.

We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day.

We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day.

Responsibilities

• Partner with Procurement, Legal, Information Security, Compliance partners, ERM and business units to embed risk controls throughout the vendor lifecycle.
• Support maintaining a centralized inventory of third‑party relationships and ensure proper risk classification.
• Help facilitate end‑to‑end third‑party risk assessments, including onboarding due diligence, periodic reviews, and offboarding evaluations.
• Assess vendor controls related to information security, data privacy, operational resilience, financial health, and regulatory compliance.
• Support the implementation of continuous monitoring processes for high‑risk and critical vendors.
• Support regulatory exams, internal audits, and cross‑functional compliance initiatives.
• Support third‑party incident reporting, critical issue, and remediation processes.
• Support root‑cause analysis for vendor‑related operational or security issues as appropriate.
• Prepare timely documentation and communication of third‑party risk issues affecting business operations.
• Provide subject matter expertise on third‑party risk across the company.
• Provide training and guidance to business partners on risk assessment processes and vendor management standards.
• Build strong relationships with internal and external partners.

Qualifications

• Minimum 7+ years’ experience in vendor management, risk management, procurement, compliance, or cybersecurity.
• Strong understanding of third‑party risk frameworks.
• Experience working with vendor management or GRC platforms.
• Ability to analyze complex issues, summarize risk findings, and communicate to executive audiences.

Education

• Bachelor’s Degree in a related field or education equivalent.

Benefits

• Robust medical, dental, vision and pharmacy coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.
• No-cost mental health and well‑being support through our Employee Assistance Program (EAP).
• 401(k) with company match and Associate Stock Purchase Program with discount.
• Opportunity for paid time off, paid parental leave and access to family building benefits.
• Home, auto and pet insurance and a company‑provided Care.com subscription.
• Tuition reimbursement and scholarship opportunities for post‑secondary education.
• Enjoy complimentary products and a 40% merchandise discount so you can experience and share the brand you love.
• Visit bbwbenefits.com for more details.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links: Los Angeles Fair Chance In Hiring Ordinance, Philadelphia Fair Chance Law, San Francisco Fair Chance Ordinance, Washington Fair Chance Act Guide

We are an equal opportunity employer. We do not make employment decisions based on an individual’s race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities. Our management team is dedicated to ensuring fulfillment of this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, associate activities and general treatment during employment. We only hire individuals authorized for employment in the United States.

Application window will close when all vacancy/vacancies are filled.