TPRM Lead: Cybersecurity Risk & Vendor Governance

VulnU; Reston, Northern (VA, KY); Hybrid; USD 154,000 - 274,000; Full time

Job summary

Workday is seeking a TPRM Lead to own the cybersecurity third-party risk program and perform principal risk assessments across the portfolio. You will partner with Security, IT, Legal, Procurement, and Compliance to identify risks, communicate impact to leadership, and drive remediation with timelines.

The role combines program ownership with hands-on risk analysis, requiring expert GRC knowledge and strong stakeholder management.

Qualifications

• Deep understanding of third-party risk management across the lifecycle.
• Ability to translate risk into business impact for leadership.
• Experience with GRC tools and risk assessment methodologies.

Responsibilities

• Own and evolve the third-party risk strategy and program.
• Lead risk assessments for key third parties and monitor issues.
• Perform broader risk assessments beyond third parties.
• Collaborate with Legal, Procurement, Privacy and Compliance.
• Develop risk metrics and dashboards to track progress.
• Drive automation and consider AI-enabled tooling.
• Mentor team members and advance risk practices.

Skills

TPRM

Risk analysis (FAIR)

Stakeholder management

Communication skills

AI governance

Education

B.S. or M.S. in Computer Science / Information Security / MIS or related field

Tools

ServiceNow GRC

OneTrust

Archer

LogicGate

Job description

Workday is seeking a TPRM Lead to own the cybersecurity third-party risk program and perform principal risk assessments across the portfolio. You will partner with Security, IT, Legal, Procurement, and Compliance to identify risks, communicate impact to leadership, and drive remediation with timelines.

The role combines program ownership with hands-on risk analysis, requiring expert GRC knowledge and strong stakeholder management.