TPCRM Risk Manager

Largeton Group; Princeton (NJ); On-site; USD 110,000 - 170,000; Full time

Job summary

Genmab is seeking a TPCRM Risk Manager to lead third-party cyber risk management, including risk assessments, security controls and audits for Genmab's partners and suppliers. The role involves developing TPCRM standards, documenting metrics, and maintaining compliance with evolving regulations.

The successful candidate will collaborate with cross-functional teams to deploy vendor security requirements, evaluate assurance statements and drive risk reduction through audits and dashboards.

Qualifications

• Lead and manage TPCRM activities including risk assessments, security controls and audits.
• Develop, update and implement TPCRM standards, documentation, metrics and requirements.
• Stay current on security and privacy regulations to ensure compliance and risk mitigation.

Responsibilities

• Identify, assess and monitor third-party security risks using appropriate tools.
• Collaborate with Procurement, Legal, Compliance, Privacy and QA to deploy vendor security requirements.
• Evaluate supplier security statements and ensure timely assessments or reassessments.
• Design and manage cyber risk audits and reporting dashboards, KPIs and KRIs.
• Provide guidance to business teams and mentor new members on security processes.

Skills

Risk management

Third-party risk

Cyber security

Audits

Stakeholder collaboration

KPI/KRI reporting

Mentoring

Regulatory compliance

Job description

Job Summary TPCRM Risk Manager Information Security & Third-Party Cyber Risk Management

• Lead and manage Third-Party Cyber Risk Management (TPCRM) activities, including risk assessments, security controls, and audits for Genmab s partners and suppliers.
• Develop, update, and implement TPCRM security standards, documentation, metrics, and requirements.
• Continuously identify, assess, and monitor third-party security risks using appropriate tools and techniques.
• Support and enhance the TPCRM program, ensuring compliance with relevant regulations (e.g., Danish NIS2 Act) and internal policies.
• Collaborate with cross-functional teams such as Procurement, Legal, Corporate Compliance, Privacy, and Quality Assurance to align and deploy security requirements for vendors.
• Evaluate security assurance statements from critical suppliers and ensure all relevant suppliers are assessed or reassessed within set timelines.
• Design, execute, and manage cyber risk audits and assurance activities, integrating results into dashboards and reporting frameworks.
• Define, track, and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) related to IT risk management.
• Maintain strong working relationships with internal stakeholders (e.g., DD&AI, Legal, Global Procurement) to ensure effective risk management.
• Independently execute implementation of security controls, risk assessments, and risk management processes for assigned projects or business areas.
• Lead the setup and optimization of internal security management processes and participate in cross-functional project teams.
• Provide guidance to business teams and mentor new team members on security systems, processes, and best practices.
• Stay current on developments in security, privacy, and data protection regulations to ensure ongoing compliance and risk mitigation.