Third Party Risk Management – Supply Chain Design Lead

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Design, document, and enhance processes and workflows related to Supply Chain Risk Management.

• Identify areas for improvement in efficiency, effectiveness, and stakeholder experience throughout the risk management lifecycle.

• Develop process maps, workflow documentation, standard operating procedures, and other supporting materials.

• Assess changing regulatory requirements and industry practices to propose process enhancements.

• Serve as a trusted partner to business, risk, technology, and operational stakeholders.

• Lead discussions to gather requirements, build consensus, and promote the adoption of new processes and capabilities.

• Influence cross-functional teams and secure buy-in for process improvements and strategic initiatives.

• Convert business requirements into actionable process improvements and technical enhancements.

• Create and manage Jira stories, enhancement requests, and defect remediation tasks.

• Support User Acceptance Testing (UAT) activities and verify that delivered solutions meet business requirements.

• Collaborate with training and communications teams to develop user guidance, job aids, and training materials.

• Assist in maintaining and enhancing risk management workflows and supporting technology platforms, including ProcessUnity.

⛳️ Requirements

• A bachelor's degree in Business, Risk Management, Information Security, Supply Chain Management, or a related field; equivalent experience may be taken into account.

• Practical experience with Jira for managing requirements, creating user stories, tracking defects, managing workflows, and delivering enhancements.

• Over 5 years of experience in leading or supporting initiatives focused on process improvement, business transformation, or risk/control frameworks.

• More than 5 years of leadership experience with a proven ability to influence stakeholders and drive initiatives without direct authority.

• At least 3 years of experience in Supply Chain Risk Management (SCRM), Third-Party Risk Management (TPRM), Vendor Risk Management, or similar risk disciplines.

• Demonstrated experience in gathering, documenting, and translating business requirements into process improvements and technology solutions.

• Strong stakeholder management abilities and experience engaging with senior leaders, technical teams, and external organizations.

• Experience in creating process documentation, workflow diagrams, standard operating procedures (SOPs), and training materials.

• Familiarity with NIST 800-53, NIST 800-161, NIST 800-171, and the NIST Cybersecurity Framework (CSF).

• Knowledge of ISO/IEC 27002, ISO/IEC 27036, and ISO/IEC 20243 (O-TTPS).

• Experience with Microsoft Visio or similar tools for process mapping.

• Six Sigma certification or a demonstrated background in process improvement.

• Experience with ProcessUnity or other Third-Party Risk Management platforms is preferred.

• Significant experience in designing and enhancing enterprise risk management workflows is preferred.

• Experience in developing category taxonomies, governance frameworks, and enterprise process models is preferred.

• Experience in supporting highly regulated or compliance-driven environments is preferred.

• Proven success in leading large-scale process transformation and change management initiatives is preferred.

• Candidates seeking employment in the US must have work authorization that does not currently or in the future require visa sponsorship for employment authorization in the United States.

🏝️ Benefits

• Collaborative and supportive community

• Hands-on experience opportunities

• Access to certifications

• Industry-specific training

• Reasonable accommodations for disabilities or religious observances

• Commitment to equal employment opportunities

• Affirmative Action Employer for Veterans and Individuals with Disabilities