TPRM Security Program Manager (Cloud & Compliance)

CoreWeave Europe; Sunnyvale (CA); On-site; USD 157,000 - 210,000; Full time

Benefits offered by this job

Discretionary bonus

Equity awards

Comprehensive benefits

Job summary

CoreWeave is seeking a Senior TPRM Technical Program Manager to lead third-party risk management across engineering, procurement, IT and Legal. This hands-on role shapes the TPRM strategy and drives programs across the vendor lifecycle in a security-conscious environment.

You will oversee security risk assessments, track findings to closure with remediation plans, maintain the vendor inventory and risk register, and refine questionnaires and workflows.

Qualifications

• 2+ years of hands-on Third Party Risk Management experience building or maturing a TPRM program in dynamic, cloud-native environments.
• Bachelor’s degree in Information Security, Computer Science, or related field or equivalent job experience.
• Security certification such as CISA, CRISC, CISSP, or CTPRP.
• Working knowledge of security control frameworks and evaluating compliance documentation for control coverage and gaps.
• Experience conducting or supporting security risk assessments of third parties, including reviewing questionnaire responses and audit reports.

Responsibilities

• Contribute to the TPRM strategy and roadmap, ensuring alignment with security, privacy, and business objectives.
• Oversee & execute third party security risk assessments, including analysis of controls, contract requirements, and documentation.
• Track identified findings to closure, coordinating remediation plans with third parties and internal owners.
• Perform periodic reassessments of existing vendors according to tier-based review cadence.
• Maintain the vendor inventory and risk register in the TPRM platform.
• Help refine assessment questionnaires, workflows, and program documentation.
• Tailor communications to a diverse audience and adapt to varying technical depth.

Skills

TPRM experience

Security & privacy

Risk assessments

Vendor risk management

Communication

GRC tools

Education

Bachelor’s degree in Information Security, CS or related field

Security certification such as CISA, CRISC, CISSP, or CTPRP

Tools

GRC platform

Job description

CoreWeave is seeking a Senior TPRM Technical Program Manager to lead third-party risk management across engineering, procurement, IT and Legal. This hands-on role shapes the TPRM strategy and drives programs across the vendor lifecycle in a security-conscious environment.

You will oversee security risk assessments, track findings to closure with remediation plans, maintain the vendor inventory and risk register, and refine questionnaires and workflows.