Third Party Risk Manager

STRS Ohio; Columbus (OH); On-site; USD 68,000 - 82,000; Full time

Benefits offered by this job

On-site parking

Educational assistance

Subsidized medical insurance

Fully paid dental insurance

Full life insurance

Vacation and sick leave

Retirement benefits

On-site fitness center

Job summary

STRS Ohio in Columbus, OH seeks a Third Party Risk Manager to lead the TPRM program within the ITS Systems Security team. You will oversee due diligence, assessments, monitoring, and governance of vendor relationships to minimize risk to technology and business.

The role requires a Bachelor's degree and 3+ years in IT and third-party risk management, with experience in risk data analysis and risk frameworks. On-site schedule from 8:00am to 5:00pm, Monday–Friday.

Qualifications

• Bachelor's degree in computer science, business administration, risk management or related field.
• 3+ years IT and third-party risk management experience.

Responsibilities

• Develop, implement and improve the organization's third‑party risk management strategy, policy and procedures.
• Lead pre‑contract and self‑attestation questionnaires for STRS Ohio vendors.
• Review vendor contracts for risk mitigation including information security and AI/ML risk considerations.
• Facilitate risk assessments to identify and prioritize third‑party risks.
• Coordinate with Sourcing, Vendor Management and Legal/Compliance on geopolitical, sanctions and ownership risks.
• Monitor regulatory and cybersecurity developments and recommend program enhancements.

Skills

TPRM program leadership

risk assessment

vendor management

Education

Bachelor's degree (CS/BA/Risk)

Tools

TPRM software

Job description

STRS Ohio, STRS
The State Teachers Retirement System of Ohio (STRS Ohio) is seeking a Third Party Risk Manager to join the Executive/Business Operations and Security team.
Established in 1920 and serving Ohio’s educators, STRS Ohio is one of the nation’s largest retirement systems, serving nearly 550,000 active, inactive, and retired public‑school teachers, and university faculty members, managing approximately $96.3 billion as of June 30, 2025, in assets and paying more than $7 billion in benefits annually.
STRS Ohio provides a competitive pay, and a comprehensive benefits package including on‑site parking, educational assistance, subsidized medical insurance, fully paid dental and life insurance, vacation and sick leave, retirement benefits and on‑site fitness center. At STRS Ohio, you can experience rewarding work in a professional, business casual work environment. We welcome, celebrate, and promote respect for everyone. We are continually seeking bright and talented individuals to join our team.
Compensation
$67,962 - $81,555
Work Schedule
8:00am-5:00pm Monday through Friday (Onsite)
General Summary
Under the direction of the supervisor, ITS Systems Security, lead the Third‑Party Risk Management (TPRM) program for State Teachers Retirement System of Ohio (STRS Ohio). Oversee due diligence, assessment, monitoring and governance activity for third‑party relationships to minimize risk exposure and risk impacts to technology and business.
Summary Of Responsibilities

• Develop, implement and continuously improve the organization's third‑party risk management strategy, policy and procedures ensuring effective oversight of vendor relationships.
• Lead the development of pre‑contract and self‑attestation questionnaires to be completed by prospective and current STRS Ohio vendors. Monitor questionnaire completion, coordinating with vendors and internal stakeholders. Tailor due diligence requirements and questionnaire content based on the vendor's risk profile, criticality and service type.
• Review and assess vendor contracts to ensure appropriate risk mitigation, including information security, artificial intelligence (AI)/machine learning use and software supply chain protections.
• Facilitate risk assessments to identify, evaluate and prioritize third‑party risks, including subcontractor dependency, operational resilience and emerging threats.
• Assess third‑party relationships for geopolitical, sanctions, and ownership‑structure risk in coordination with Sourcing and Vendor Management and Legal/Compliance.
• Monitor applicable regulatory, cybersecurity and industry developments and recommend enhancements to the TPRM program to address evolving risks and best practices.

The above list of duties in intended to describe the general nature and level of work performed by persons assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the persons so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct and control the work of associates under supervision.
Summary Of Qualifications

• Bachelor's degree in computer science, business administration, risk management or related field required.
• Three or more years’ information technology and third‑party risk management experience required.
• Experience with third party risk management (TPRM) software platforms and risk data analysis/reporting tools preferred.
• Knowledge of and experience with the following:
  • Third‑party risk management frameworks, methodologies and industry best practices required.
  • Regulatory and risk frameworks
  • Familiarity with AI/machine learning risk considerations in vendor relationships preferred

Equal Employment Opportunity Employer Statement
State Teachers Retirement System of Ohio (STRS) is an Equal Employment Opportunity Employer and prohibits discrimination and harassment of applicants or employees on the basis of race, color, religion, gender, gender identity or expression, national origin (ancestry), military status, disability, age, genetic information, sexual orientation, or caregiver status, in making employment‑related decisions about an individual.
Visa/Sponsorship
To be offered a position with STRS Ohio, you must be either a U.S. citizen or possess proper legal authorization to work in the U.S. for the type of job you are seeking. This position is not eligible for visa sponsorship. Applicants must be authorized to work in the United States without the need for visa sponsorship.
ADA Statement
STRS Ohio is committed to ensuring access, inclusion, and reasonable accommodations across all its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act (ADA) and other applicable laws.
Posting Drug‑Free Workplace Statement
The State Teachers Retirement System of Ohio (STRS Ohio) is a drug‑free workplace. The use of recreational marijuana and non‑medical cannabis is strictly prohibited.
Pre‑Employment Drug Testing
All final candidates tentatively selected for employment will be required to undergo a urinalysis drug screening prior to appointment. This screening includes testing for illegal substances, including marijuana. A positive test result will disqualify the applicant from employment unless valid medical documentation is provided for legally prescribed medications or a physician’s recommendation for medical marijuana.
Pre‑Employment Background Investigation
The final candidate selected for this position will be subject to a criminal background check. STRS Ohio will conduct an individualized assessment of any prior criminal convictions before making a determination regarding employment eligibility.