TPRM Tech Program Manager - Cloud Security & Risk

CoreWeave; Livingston (NJ); Hybrid; USD 157,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company-paid Life Insurance

Equity awards

401(k) with employer match

Flexible PTO

ESPP participation

Tuition Reimbursement

Mental Wellness Benefits

Parental Leave

Childcare support

Lunch provided in office

Job summary

CoreWeave is seeking a TPRM Technical Program Manager to lead third-party risk management initiatives across all vendor lifecycles. You will coordinate with engineering, procurement, IT, and Legal to build and mature strong TPRM programs that support security and privacy objectives.

You will drive strategy, execute risk assessments, manage remediation timelines, and maintain governance artifacts. This hands-on role requires delivery-focused communication and deep Cloud security exposure.

Qualifications

• 2+ years of hands-on TPRM in a fast-paced, cloud-native setting.
• Bachelor’s in Information Security, CS, or related field.
• CISA, CRISC, CISSP, or CTPRP certifications.
• Knowledge of security frameworks and evaluating control documentation.
• Experience with third-party risk assessments and remediation tracking.
• Ability to maintain records in a GRC/TPRM platform.

Responsibilities

• Contribute to TPRM strategy and roadmap aligned with security and business goals.
• Oversee third-party security risk assessments and contract controls.
• Track findings to closure with remediation timelines.
• Perform periodic vendor reassessments per tier cadence.
• Maintain vendor inventory and risk register in the TPRM platform.
• Refine assessment questionnaires, workflows, and program docs.
• Tailor communications to engineers, legal, procurement, and business owners.

Skills

TPRM

Vendor risk

Security governance

Education

Bachelor's in Information Security or CS

CISA

CRISC

CISSP

CTPRP

Job description

CoreWeave is seeking a TPRM Technical Program Manager to lead third-party risk management initiatives across all vendor lifecycles. You will coordinate with engineering, procurement, IT, and Legal to build and mature strong TPRM programs that support security and privacy objectives.

You will drive strategy, execute risk assessments, manage remediation timelines, and maintain governance artifacts. This hands-on role requires delivery-focused communication and deep Cloud security exposure.