Director, Third Party Risk Management
T. Rowe Price
full-time
Posted on:
Location Type: Hybrid
Location: Baltimore • California • Colorado • United States
Visit company websiteExplore more
Salary
💰 $143,000 - $306,000 per year
Job Level
About the role
- Serve as the firm’s subject matter expert on third-party risk management.
- Contribute to the development and execution of the firm’s TPRM strategy, roadmap, and target-state operating model.
- Lead the build-out and continuous improvement of a 2LoD TPRM function following outsourcing of due diligence and periodic reviews.
- Define and maintain TPRM policies, standards, risk methodologies, and oversight frameworks aligned with regulatory expectations and industry best practices.
- Ensure alignment of the TPRM program with enterprise risk appetite and governance structures.
- Lead assessment of emerging third party risks and technologies, including AI, and integrate findings into TPRM strategy, governance, and executive reporting.
- Provide independent oversight and effective challenge of outsourced TPRM service providers, including due diligence execution and ongoing monitoring.
- Report on systemic control gaps, concentration risk, and emerging third-party risk themes across the vendor population.
- Design and deliver executive and board-level reporting on third-party risk, including trends, emerging risks, and risk appetite breaches.
- Provide leadership, guidance, and technical mentorship to TPRM risk analysts and managers.
Requirements
- Bachelor’s degree in Risk Management, Information Systems, Finance, Business, Law, or a related field.
- 10+ years of experience in third-party risk management, operational risk, or compliance, with significant experience in a 2LoD capacity within financial services or asset management (or other industry subject to equivalent regulatory scrutiny).
- Demonstrated experience designing, implementing, or maturing a TPRM program, including oversight of outsourced or co-sourced models.
- Deep understanding of regulatory expectations for third-party risk (e.g., SEC, FINRA, global regulators).
- Proven ability to operate as a trusted expert and strategic advisor to senior leadership.
- Required Certifications (at least one): Certified Third Party Risk Professional (CTPRP), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA).
Benefits
- Competitive compensation
- Annual bonus eligibility
- A generous retirement plan
- Hybrid work schedule
- Health and wellness benefits, including online therapy
- Paid time off for vacation, illness, medical appointments, and volunteering days
- Family care resources, including fertility and adoption benefits
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
third-party risk managementoperational riskcomplianceTPRM program designrisk methodologiesoversight frameworksdue diligenceemerging risk assessmentexecutive reportingtechnical mentorship
Soft skills
leadershipstrategic advisoryguidancecommunicationindependent oversight
Certifications
Certified Third Party Risk Professional (CTPRP)Certified in Risk and Information Systems Control (CRISC)Certified Information Systems Auditor (CISA)