In this role, you will partner with stakeholders across risk, technology, controls, procurement, and supplier management to execute assurance activities, improve risk visibility, and support a strong control environment. This is an opportunity to influence strategy, elevate risk management practices, and lead initiatives that advance regulatory compliance and operational excellence.
As a Vendor Management Portfolio Manager in Human Resources team, you will lead oversight and continuous improvement of third-party assessment activities and the broader third-party assurance program. You will define and execute assurance strategies, shape operating models, and drive governance, controls, and risk management practices. You will deliver executive reporting, actionable risk insights, and program enhancements—helping strengthen third-party risk management across the organization. Your work will reinforce a strong risk culture, continuous improvement, and alignment with regulatory and organizational requirements.
Job Responsibilities
- Lead initiatives to strengthen third-party risk assessments and control environments; identify improvement opportunities and advise on control implementation to mitigate thematic risks
- Drive and oversee execution of third-party assurance programs, ensuring alignment with business objectives, risk appetite, and regulatory requirements
- Prepare and deliver reporting and metrics that highlight risk trends, program effectiveness, and third-party cyber and technology risks
- Partner with control owners to establish and maintain cyber, technology, and data control requirements for third-party relationships
- Serve as a liaison across supplier management, technology risk, product security, control management, and governance teams to enable a coordinated approach to third-party risk management
- Use enterprise-authorized AI capabilities to support risk and control analysis, reporting, and insights, while adhering to data handling and security requirements
- Promote reuse-first and AI-assisted approaches to improve control testing, issue management, and action plan processes while maintaining auditability and regulatory alignment
- Monitor industry developments, emerging threats, and evolving best practices to continuously strengthen third-party risk management
Required Qualifications, Capabilities, and Skills
- Bachelor’s degree in Information Security, Cybersecurity, Risk Management, Business Administration, or a related field
- Previous in third-party risk management, cybersecurity, technology risk, or a related discipline
- Experience working in a highly regulated industry (e.g., financial services or healthcare)
- Demonstrated ability to lead cross-functional initiatives and influence senior stakeholders
- Knowledge of third-party risk management frameworks, cybersecurity controls, and regulatory requirements
- Experience using governance, risk, compliance, and data analytics platforms (e.g., ServiceNow, Alteryx, Tableau, or QlikView)
- Experience using enterprise-authorized AI capabilities to support risk and controls workflows
- Experience developing and presenting risk metrics, dashboards, and executive-level reporting
- Experience partnering with legal and procurement teams on cybersecurity and data protection requirements
- Excellent communication and stakeholder management skills
- Proven ability to manage complex programs and projects in a fast-paced environment