Third Party Risk Management Manager Jobs

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We’re looking for a Third-Party Risk Management (TPRM) Manager to lead a technically rigorous global program and shape its AI-native future. You will own the vendor security risk lifecycle, lead complex assessments of integrations with our most critical systems and data, and develop a team that makes clear, evidence-based risk decisions. You will also set the vision and build practical agentic workflows that improve how we gather evidence, assess risk, and follow through on remediation. Reporting to the Global Head of GRC, you will serve as their US-based deputy and provide GRC leadership and escalation coverage during US business hours. You will directly manage TPRM analysts together with other US-based GRC team members assigned to your organization. This role combines hands-on technical judgment, program ownership and people leadership. You will be based in the United States, preferably within the Eastern or Central timezones, with core working hours aligned to US business needs and clear handoffs with global colleagues. What you will do Run the day-to-day TPRM program operations from vendor discovery and risk tiering through due diligence, onboarding, continuous monitoring, remediation and exit. Maintain a reliable vendor inventory, policies, assessment standards, and service levels across DoorDash, Wolt, and Deliveroo, covering cloud, SaaS, business process outsourcing (BPO), and other critical suppliers. Lead assessments of vendors connected to crown jewel systems, including identity platforms, production cloud, source code and CI/CD, and sensitive-data platforms. Examine architecture, data flows, permissions, and control evidence. Use st

Description: The key objectives of the TPRM Program are to: Assess the risk of third-party relationships which drive the rigor of risk management activities both during the third-party onboarding and ongoing monitoring lifecycle phases using the TPRM Program’s formula-based risk methodology Act as a liaison across key internal stakeholder teams (Procurement, Legal, Enterprise Security and the Business) to ensure clear and accurate communication of third-party risks aligned to risk management activities in order to complete risk assessments in a timely manner Identify TPRM program enhancements aimed at the effective and efficient management of third-party risk in order to support Business strategic initiatives Reporting to the TPRM Manager, the TPRM Risk Analyst will be expected to have strong experience operating in a risk-based, data-driven model that will accommodate the business’s need to onboard vendors in a shortened timeframe, all while managing expectations and heightened scrutiny of both internal and external stakeholders including our customers. The TPRM Risk Analyst will understand and clearly communicate not only the “What” but also the “Why” in terms of third-party risk management activities in order to support efficient and effective third-party risk management as MongoDB continues to grow. This role requires substantial ability to interpret data and apply risk knowledge and judgment as the TPRM Risk Analyst manages a complex ecosystem of data, regulations, and stakeholder relationships while continuously identifying areas of enhancement to support effective third-party risk management. We are looking to speak to candidates who are based in Dublin for our hybrid working model. Responsibilities: Risk Assessment Validation & Remediation Strong experience in managing the full lifecycle of a Third Party from Sourcing to Payment Independently validate inherent risk rating and Criticality designation for all third-party relationships with minimal in

The key objectives of the TPRM Program are to: Assess the risk of third-party relationships which drive the rigor of risk management activities both during the third-party onboarding and ongoing monitoring lifecycle phases using the TPRM Program’s formula-based risk methodology; Act as a liaison across key internal stakeholder teams (Procurement, Legal, Enterprise Security and the Business) to ensure clear and accurate communication of third-party risks aligned to risk management activities in order to complete risk assessments in a timely manner; Identify TPRM program enhancements aimed at the effective and efficient management of third-party risk in order to support Business strategic initiatives. Reporting to the TPRM Manager and working closely with the TPRM Risk Analyst, the Associate TPRM Risk Analyst will support day-to-day execution of the third-party risk lifecycle. This is a support-oriented analyst role focused on applying established TPRM procedures and risk methodology to standard engagements, maintaining complete and accurate assessment records, coordinating routine stakeholder activity, and escalating issues that require additional judgment. Responsibilities: Risk Intake & Assessment Methodology Apply the TPRM Program’s formula-based inherent risk methodology and assign Criticality designations for standard third-party relationships, documenting the inputs, rationale, and supporting evidence Perform completeness and consistency checks on intake information, risk calculations, and assessment records; identify missing, inconsistent, or unclear information and escalate exceptions in accordance with defined thresholds. Documentation Analysis & SME Coordination Gather, organize, and maintain third-party-provided information and documentation in accordance with TPRM assessment methodology and audit-readiness expectations. Identify and route required SME reviews using defined risk triggers, track responses, and document completed SM

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world's largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Third Party Risk Management (TPRM) team is accountable for defining, maintaining, and overseeing the third-party risk framework, policy, and inventory in accordance with management expectations and best practices. We are focused on assessing and managing risks exposed through our relationships with third parties, adhering to regulatory guidance, and driving operational efficiencies across risk teams. What you'll do In this role, you'll support and maintain a robust framework for identifying, assessing, and managing third-party risks to protect Stripe. You'll partner with cross-functional Risk Domain Owners, Procurement subteams, Legal, and other stakeholders to apply a unified Third Party Risk Framework across risk and compliance areas. You'll maintain the existing Stripe Third Party Risk Program, Policy, and Standards, while further developing new Standards to propel the maturity of the Third Party Risk Program. Responsibilities Maintain the Global Third Party Risk Management Program, Policy, and Framework, ensuring alignment with relevant regulations, standards, and best practices Launch and mature nascent risk domains to increase overall program maturity Design and support an enhanced oversight model for specialized third-party types including Partnerships and Contingent Workers Design and enhance elements of the existing Third Party Risk Framework including offboarding and incident monitoring, among other areas Build an

About the Team The Internal Controls function sits within the broader Finance Risk Management (FRM) organization and plays a key role in strengthening the integrity, scalability, and reliability of OpenAI’s finance-critical operations. Our team designs and governs control frameworks that support accurate, transparent financial results and responsible business execution. We focus on business-process and operational controls across areas such as payments, equity, procure-to-pay, payroll and HR processes, strategic investments, M&A, financial close, third-party dependencies, systems, and other high-risk workflows. We work closely with Controllership, Procurement, Legal, People, Corporate Development, Strategic Finance, Finance Systems, Compliance, and business operators to ensure processes are well-designed, well-documented, and audit-ready. As part of FRM, we contribute to OpenAI’s overall financial risk posture by supporting audit readiness, third-party risk considerations, operational risk governance, systems oversight, and ongoing process improvement across the finance ecosystem. Together, we help build the foundation of trust and operational clarity needed for OpenAI to scale responsibly. About the Role We’re seeking a Senior Manager, Financial Risk Management to help shape and scale OpenAI’s risk and controls framework across several dynamic business domains. This role will focus on identifying, prioritizing, and mitigating operational and financial risk across areas such as payments, equity, strategic investments, procurement, people processes, systems, third-party dependencies, and other finance-critical workflows. This person will serve as a senior cross-functional partner to Finance, Controllership, Legal, People, Procurement, Corporate Development, Payments, Systems, and business operators to design and implement controls that are practical, scalable, and capable of holding up in a fast-changing environment with limited structure. The role requires someo

Job Title: Third Party Risk Management (TPRM) - BCIM Specialist About Us “Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount . With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION Role Description BCIM Senior Manager/Specialist – must be based in Hyderabad: • Governance: o Coordinate annual review of the BCM and Major Incident Management Operating Instructions and Target Operating Model using the new Knowledge Management System (KMS) o Annual review of Group Communicable Disease Plan o Coordinate responses to global audits and other internal reviews (such as NIST, GCOO material controls reviews) and track closure of findings o Work with CCO to align BIIR controls to the new framework o Manage Global MSIIs; coordinate closure o Coordinate submissions to Global BRR, OpCo, RMM, and drive improvement in the Global BCIM RCOM submission and risk oversight • Comm

Job Title: Third Party Risk Management (TPRM) - BCIM Specialist About Us “Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount . With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION Role Description BCIM Senior Manager/Specialist – must be based in Hyderabad: • Governance: o Coordinate annual review of the BCM and Major Incident Management Operating Instructions and Target Operating Model using the new Knowledge Management System (KMS) o Annual review of Group Communicable Disease Plan o Coordinate responses to global audits and other internal reviews (such as NIST, GCOO material controls reviews) and track closure of findings o Work with CCO to align BIIR controls to the new framework o Manage Global MSIIs; coordinate closure o Coordinate submissions to Global BRR, OpCo, RMM, and drive improvement in the Global BCIM RCOM submission and risk oversight • Comm

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet needs a clear, defensible answer to "how risky is this?" for the risks that live inside our own environment and the risks that come in through every vendor and partner we rely on. We're looking for a Sr. Security Engineer I to own our Security Risk Management program end-to-end—running risk identification, analysis, and quantification; maintaining the enterprise risk register; and driving mitigation strategies that leadership can act on—while also overseeing our Third-Party Risk Management (TPRM) function. You don't need to be a hands-on security engineer to succeed here: you need to understand our technology and architecture well enough to have a real conversation with engineering teams about their risk exposure, and you need the judgment and communication skill to turn technical risk into business language that drives decisions. This role sits at the center of how Smartsheet decides what to fix first, what to accept, and what a vendor relationship is actually costing us in risk. This role reports to the Senior Director, GRC Engineering and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Own and mature Smartsheet's Security Risk Management program: risk identification, analysis, scoring, and quantification (e.g., FAIR-based or similar) across internal systems, third parties, and emerging initiatives. Maintain the enterprise risk register—ratings, ownership, mitigation status, and residual risk—and drive it toward a living, decisi

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats, ensuring compliance, and fostering a culture of security throughout our product and operations. As the Security Risk Manager, you will own Asana's internal security risk management program end-to-end. This is a senior role for someone who goes beyond frameworks and checklists — you will engineer the quantitative and automated foundations that let Asana continuously measure and make confident decisions about security risk. You'll build the systems and processes that make risk scalable, not just the policies that describe it, and serve as a trusted advisor to senior leadership. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements What you'll achieve Own Asana's security risk management program: Design and continuously mature a quantitative risk framework — including risk scoring methodologies, likelihood and impact modeling, and risk appetite thresholds — that enables consistent, data-driven risk decisions across the organization. Build and maintain a living risk register: Own Asana's central security risk register, developing KRIs, tracking trends over time, and driving accountability for risk treatment and remediation with business and technical owners. Automate risk identification and monitoring: Design and implement automated data pipelines and integrations that continuously surface security risks — pulling signals from vulnerability scanners, cloud security tooling, SIEMs, and third-party risk sources — so Asana's

Job Requisition ID # 26WD100179 Position Overview The Trust Risk Manager leads the Trust Risk Program at Autodesk and manages a multidisciplinary organization that includes Third-Party Risk Management as well as senior risk professionals. T rust Risk at Autodesk is an established team and program . W e are looking for a leader with the lived experience of operationalizing a risk program that is Trusted by leaders and executives to drive risk-based decisions in the areas of Trust – Security, Privacy, Trusted AI, and Resilience. This individual will report directly to the Director of Trust Governance, Risk, and Compliance. The successful candidate will bring deep expertise in at least one Trust risk domain and sufficient breadth across security, privacy, trusted AI, resilience, and third-party risk to integrate specialist perspectives into an enterprise risk view. Operationalizing risk management and working with executive stakeholders is as much of an art as it is science . Th e Trust Risk Manager needs to have lived, practical experience to g

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

At Scale, we are driving the future of AI and Machine Learning across a variety of industries. As the Program Manager for Compliance, you will play a pivotal role in the continued success of Scale. Your role will be instrumental in ensuring the effective operation of our Compliance department and our GRC function, allowing us to maintain the highest standards in our industry. Reporting to the Director & Associate General Counsel, Compliance, you will be a dedicated program manager for Scale's enterprise compliance program and the person who turns policy into practice across anti-bribery and anti-corruption, gifts and entertainment, conflicts of interest, third-party risk and sanctions, policy lifecycle, and company-wide training. This is a hands-on builder, not a maintenance role. You will support Commercial, Public Sector, and international business lines, working closely with Legal, Procurement, Finance, Security, and go-to-market teams. You will: Help build, design, improve, and streamline Scale's core compliance programs, including anti-bribery and anti-corruption (ABAC), gifts and entertainment, conflicts of interest, and third-party risk and sanctions screening. Collaborate with stakeholders across the company to improve compliance policies, processes, and procedures. Monitor regulatory developments relevant to Scale's business, translate them into concrete policy and process changes, and track compliance obligations flowing out of customer contracts. Partner with leadership to build, mature, and operationalize the company's enterprise risk management (ERM) framework, identifying and assessing key business risks. Build the reporting layer: metrics and periodic reporting that give Legal & GRC leadership a defensible picture of program health. Flex into audit and assurance work during peak certification periods, and own inbound customer and investor compliance diligence questionnaires. Ideally you'd have: 5+ years building or operating ethics and c