Risk

• Act as a liaison between central TPRM governance and business unit TPRM leads
• Develop and maintain TPRM policies and procedures (as necessary) aligned with corporate risk appetite, regulatory requirements (e.g., GxP, GDPR, FCPA), and industry standards (e.g., ISO 27001, NIST)
• Define third-party segmentation criteria, risk tiers, and lifecycle stages (onboarding, monitoring, termination)
• Design and oversee tools and processes for initial risk screening (e.g., financial, regulatory, ESG) and deep-dive due diligence (e.g., cyber, data privacy, operational resilience)
• Review and challenge risk assessments conducted by decentralized teams and lead appropriate training and awareness programs
• Consolidate key risk indicators (KRIs) and performance metrics for enterprise-level reporting
• Drive automation and integration initiatives across the vendor lifecycle and act as business owner of TPRM platforms (e.g., Aravo, Coupa Risk Aware, ServiceNow VRM)
• Provide regular reports and dashboards for executive management and functions
• Stay current with global regulatory changes relevant to third-party relationships and ensure decentralized units adapt their processes to maintain regulatory compliance
• Manage regulatory and internal audit interactions related to supplier risk management including coordination with Global Internal Audit on their supplier audits.

Senior Manager – Third Party Risk Management

Executive Risk Control Specialist – Large Accounts

Director of Information Governance

Director of Information Governance

Associate Manager, Strategy & Operations – Payments Risk

Senior Data Governance Consultant – Systems/Applications Analyst