TPRM Tech Program Manager - Vendor Risk & Security

CoreWeave; Bellevue (WA); On-site; USD 157,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company-paid Life Insurance

ESPP

401(k) with employer match

Flexible PTO

Parental Leave

Job summary

CoreWeave is seeking a TPRM-focused Technical Program Manager to lead third‑party risk management initiatives across our security programs. You will collaborate with engineering, procurement, IT, and Legal to drive risk assessments, remediation, and governance for vendor relationships.

You’ll help build scalable TPRM processes, maintain risk inventories, and refine questionnaires. Candidates should bring hands‑on experience in cloud environments and strong communication across diverse

Qualifications

• 2+ years of hands-on experience in Third Party Risk Management in a fast-paced or cloud-native environment.
• Bachelor’s degree in Information Security, Computer Science, or related field or equivalent experience.
• Security certifications such as CISA, CRISC, CISSP, or CTPRP.
• Working knowledge of common security control frameworks and standards; ability to evaluate documentation for coverage and gaps.
• Experience conducting security risk assessments of third parties and reviewing audit evidence.
• Experience tracking risk findings and remediation items to closure across multiple stakeholders.
• Ability to maintain accurate records in a GRC/TPRM platform.
• Strong written and verbal communication, capable of adjusting depth for engineers to legal/business owners.

Responsibilities

• Contribute to the TPRM strategy and roadmap aligned with security and business objectives.
• Oversee third party security risk assessments, including controls, contracts, and compliance docs.
• Track findings to closure, coordinating remediation with vendors and internal owners.
• Perform periodic reassessments of vendors according to tiered review cadence.
• Maintain vendor inventory and risk register in the TPRM system.
• Refine assessment questionnaires, workflows, and program documentation.
• Tailor communications to diverse audiences with varying technical depth.

Skills

TPRM

Risk assessments

GRC

Security frameworks

Documentation

Vendor management

Education

Bachelor's degree

Tools

GRC platform

Job description

CoreWeave is seeking a TPRM-focused Technical Program Manager to lead third‑party risk management initiatives across our security programs. You will collaborate with engineering, procurement, IT, and Legal to drive risk assessments, remediation, and governance for vendor relationships.

You’ll help build scalable TPRM processes, maintain risk inventories, and refine questionnaires. Candidates should bring hands‑on experience in cloud environments and strong communication across diverse