AX-19 Third Party Risk Management Manager

Job Summary

Oceans Code Experts is looking for a Third-Party Risk Management Manager to join our team. This role involves overseeing enterprise-scale TPRM programs, supplier risk assessments, incident management, and regulatory compliance. The ideal candidate will have 10+ years of experience in TPRM, strong leadership skills, and expertise in cybersecurity functions.

Job Responsibilities

• Lead enterprise-scale TPRM programs, operations, and governance frameworks across multiple regions and business units.
• Conduct supplier risk assessments, due diligence, risk reporting, incident management, and ensure regulatory compliance.
• Utilize OneTrust TPRM for third-party risk assessment methodologies, workflow configuration, and process optimization.
• Integrate security posture insights from continuous monitoring platforms like BitSight into risk management decisions.
• Manage teams, drive organizational change, resolve complex stakeholder issues, and influence executive-level decisions.
• Present complex risk concepts to senior leadership, boards, and auditors with strong executive communication skills.

Job Requirements

• 10+ years of experience in TPRM, Supply Chain Risk Management, Information Security Risk, GRC, or related cybersecurity functions.
• Demonstrated experience leading enterprise-scale TPRM programs and operations.
• Strong expertise in supplier risk assessments, due diligence, incident management, and regulatory compliance.
• Hands-on experience with OneTrust TPRM and third-party risk assessment methodologies.
• Experience with continuous monitoring platforms like BitSight.
• Proven leadership skills in managing teams and influencing executive-level decisions.
• Advanced English proficiency, written and spoken.
• Knowledge of security risk, cybersecurity functions, and OneTrust TPRM.

Nice to Have

• Experience developing automation using Copilot or other Agentic AI frameworks.
• Experience leading TPRM activities during mergers, acquisitions, divestitures, and integration programs.
• Knowledge of emerging risks including AI, cloud security, geopolitical risk, privacy, and evolving regulatory requirements.
• Experience implementing automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.
• Familiarity with enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, and privacy regulations.
• Experience collaborating with Procurement, Legal, Privacy, Internal Audit, and Enterprise Risk Management teams.
• Strong executive communication skills to present complex risk concepts to senior leadership, boards, and auditors.

Position Type and Expected Hours of Work

• Full-time consulting position.
• Up to 40 hours per week with flexible core hours.
• Fully remote.

Header

• Position Title: Third-Party Risk Management Manager
• Technologies: Security Risk, cybersecurity functions, OneTrust TPRM
• Locations Available: Colombia
• Job Mode: Full-time
• Work Mode: 100% Remote