Program Manager – Third Party Risk Management

This is a fully remote position, open to applicants in Florida, +3 more states.

📋 Description

• Take ownership of and manage the third-party risk program throughout the entire vendor lifecycle.

• Develop and uphold program timelines, milestones, and status reports.

• Identify gaps in processes and drive the continuous enhancement of program workflows.

• Assist in the implementation of the third-party risk program.

• Act as the main contact for third-party vendors.

• Coordinate the collection of vendor documentation, evidence, and remediation strategies.

• Monitor vendor responsiveness and escalate any delays or instances of non-compliance.

• Oversee and execute third-party risk assessments utilizing OneTrust.

• Evaluate assessment outcomes, determine risk levels and gaps, and outline remediation measures.

• Maintain vendor and assessment records within OneTrust.

• Create reports and dashboards in OneTrust for program reporting and audits.

• Ensure program documentation is accurate, complete, up-to-date, and ready for audits.

• Assist with both internal and external audits.

• Collaborate with Legal, Information Security, Privacy, Procurement, and business stakeholders.

• Communicate requirements, findings, and remediation needs to both technical and non-technical audiences.

• Serve as a liaison between vendors and internal teams to address issues and advance the program.

⛳️ Requirements

• A Bachelor's degree with 3+ years of experience in third-party/vendor risk management, program management, or compliance, preferably in healthcare or a regulated field.

• Alternatively, 5+ years of relevant experience may be considered in place of a degree.

• Preferred 5+ years of experience in third-party/vendor risk management, program management, or compliance without a Bachelor's degree.

• Practical experience with OneTrust or comparable GRC/risk management platforms.

• Familiarity with HIPAA, HITECH, and requirements for healthcare data privacy/security.

• Strong organizational abilities with the capacity to manage multiple vendors and assessments concurrently.

• Exceptional written and verbal communication skills, along with cross-functional experience.

• A certification in risk or compliance, such as CTPRP or CRISC, is preferred.

• Experience with vendor contract evaluations or working alongside Legal/Procurement is preferred.

• Knowledge of information security risk assessment frameworks like NIST or HITRUST is preferred.

🏝️ Benefits

• Medical, Dental, and Vision plans.

• Adoption, Fertility, and Surrogacy Reimbursement up to $10,000.

• Paid Time Off and Sick Leave.

• Paid Parental & Family Caregiver Leave.

• Emergency Backup Care.

• Long-Term, Short-Term Disability, and Critical Illness plans.

• Life Insurance.

• 401k/403B with Employer Match.

• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education.

• Student Debt Pay Down – $10,000.

• Pet Insurance.

• Legal Resources Plan.

• Opportunity for an annual discretionary bonus if established system and employee eligibility criteria are met.

• Professional development.

• Continued employment philosophy.