Vendor Risk & Security Lead

STRS Ohio; Columbus (OH); On-site; USD 68,000 - 82,000; Full time

Benefits offered by this job

On-site parking

Educational assistance

Subsidized medical insurance

Fully paid dental insurance

Full life insurance

Vacation and sick leave

Retirement benefits

On-site fitness center

Job summary

STRS Ohio in Columbus, OH seeks a Third Party Risk Manager to lead the TPRM program within the ITS Systems Security team. You will oversee due diligence, assessments, monitoring, and governance of vendor relationships to minimize risk to technology and business.

The role requires a Bachelor's degree and 3+ years in IT and third-party risk management, with experience in risk data analysis and risk frameworks. On-site schedule from 8:00am to 5:00pm, Monday–Friday.

Qualifications

• Bachelor's degree in computer science, business administration, risk management or related field.
• 3+ years IT and third-party risk management experience.

Responsibilities

• Develop, implement and improve the organization's third‑party risk management strategy, policy and procedures.
• Lead pre‑contract and self‑attestation questionnaires for STRS Ohio vendors.
• Review vendor contracts for risk mitigation including information security and AI/ML risk considerations.
• Facilitate risk assessments to identify and prioritize third‑party risks.
• Coordinate with Sourcing, Vendor Management and Legal/Compliance on geopolitical, sanctions and ownership risks.
• Monitor regulatory and cybersecurity developments and recommend program enhancements.

Skills

TPRM program leadership

risk assessment

vendor management

Education

Bachelor's degree (CS/BA/Risk)

Tools

TPRM software

Job description

STRS Ohio in Columbus, OH seeks a Third Party Risk Manager to lead the TPRM program within the ITS Systems Security team. You will oversee due diligence, assessments, monitoring, and governance of vendor relationships to minimize risk to technology and business.

The role requires a Bachelor's degree and 3+ years in IT and third-party risk management, with experience in risk data analysis and risk frameworks. On-site schedule from 8:00am to 5:00pm, Monday–Friday.