TPRM Program Lead for Data Sharing & Security

CoreWeave; Sunnyvale (CA); On-site; USD 157,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company‑paid Life Insurance

Tuition Reimbursement

ESPP

Paid Parental Leave

Flexible PTO

Catered lunch

Job summary

CoreWeave is seeking a TPRM Technical Program Manager to lead governance of external data sharing across products and platforms. You will work with engineering, procurement, IT, and Legal to steward risk controls and compliance for complex cloud environments.

You will define onboarding controls, monitor data flows, and report metrics to leadership while shaping the TPRM strategy and driving remediation with cross‑functional owners.

Qualifications

• 5+ years of experience in third‑party risk management, data governance, privacy, or information security risk, with at least 2 years focused on external data sharing.
• Experience building or maintaining data inventories/data maps, including data classification, processing purpose, legal basis, and cross‑border transfer mechanisms.
• Experience implementing continuous or automated monitoring of data flows.
• Knowledge of privacy regulations (GDPR, CCPA/CPRA) and transfer mechanisms (SCCs, DPAs).
• Hands‑on experience conducting third‑party security risk assessments with SOC 2, ISO 27001, or similar artifacts.

Responsibilities

• Maintain a complete register of external data shares, including data categories, purpose, legal basis, transfer mechanism, and contractual restrictions.
• Define and operationalize controls for onboarding new external shares: pre‑share review, minimization, approved transfer methods, and documented approvals.
• Monitor external data flows to detect undocumented, expired, or out‑of‑scope sharing, and drive remediation with accountable teams.
• Establish metrics and reporting on data mapping coverage and external sharing risk for leadership and governance forums.
• Contribute to the Third‑Party Risk Management (TPRM) strategy and roadmap, aligning with CoreWeave's security, privacy, and business objectives
• Oversee and execute third party security risk assessments, including analysis of controls, contract requirements, and compliance artifacts
• Act as SME for technical TPRM & Privacy risks, communicating remediation strategies to technical and executive audiences
• Tailor communications to diverse audiences and adapt to varying levels of technical depth

Skills

TPRM

Data governance

Privacy

Information security risk

External data sharing

Security controls

NIST CSF

Audit readiness

Communication to executives

Program management

Tools

SQL

Python

Job description

CoreWeave is seeking a TPRM Technical Program Manager to lead governance of external data sharing across products and platforms. You will work with engineering, procurement, IT, and Legal to steward risk controls and compliance for complex cloud environments.

You will define onboarding controls, monitor data flows, and report metrics to leadership while shaping the TPRM strategy and driving remediation with cross‑functional owners.