Third Party Risk Management Manager Jobs

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We're hiring a Security Risk Specialist, who will help run and shape our risk management program and treatment plans, enabling risk and control owners and security teams to keep risk at an acceptable level as the business grows. You will work cross-functionally to achieve business goals by running risk assessments and reporting, supporting exception requests when a policy can't be met, and helping automate the tooling and processes that keep our risk register accurate and trustworthy. You'll also help us build a more proactive risk function — going into specific areas of the business to deep-dive their controls, surface where things have gone wrong, and get ahead of issues before they surface. You will report into the Senior Security Risk Manager on our GRC team in our Security organization. You’re excited about this opportunity because you will… Lead our global risk management process (assessing risk, negotiating treatment plans with owners, turning regulatory and framework changes into real, working controls) Get into the detail of how controls operate day-to-day, factoring in threat intelligence to make sure we stay ahead of new threat actors and attack vectors Manage policy exceptions by building compensatory controls or a case for risk acceptance instead Own risk reporting for key areas like security or engineering, becoming the go-to risk contact for at least one and helping reduce risk there in a measurable way Collaborate and report widely within our GRC and security teams and across the business Help shape our team’s strategy and tooling as we grow by building your own automations rather than waiting on an engineer to build them for y

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Manager of Technology, Data, Privacy, and Third-Party Risk Legal Services at Aetna Center of Excellence (COE) is a key leadership position responsible for overseeing privacy incident response, operations and technology solutions that protect sensitive data across the organization. This role requires a deep understanding of data protection laws (e.g., NY DFS, HIPAA, State laws), regulations, and policies to ensure compliance. The Senior Manager will conduct privacy incident investigations, help oversee privacy incident response, and draft privacy policies and documentation related to privacy incidents, remediation and investigations. The ideal candidate will work collaboratively with cross-functional teams to implement effective privacy programs, respond to data incidents and breaches, and maintain compliance with privacy, security, and data governance standards. Required Qualifications 7+ years of experience in Privacy, healthcare, data governance, risk management, compliance, or a related field. 5+ years of expertise in healthcare regulations, including HIPAA and other Privacy regulations, CMS requirements, and state privacy laws. Proven track record in investigating and handling privacy incident respon

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Luxembourg Audit Manager, you'll join the Internal Audit team and own a portfolio of operational, financial, and compliance audits across Coinbase's Luxembourg entity operations. This team delivers independent, third-line assurance over governance, risk management, and control effectiveness, helping Coinbase protect customers and maintain trust at scale. You'll shape audit coverage aligned with European and Luxembourg regulatory requirements (CSSF, ECB, EBA, ESMA), ensure findings from complex audit work are communicated to executive, Board-level, and regulatory audiences, and lead team members to build a best-in-class operational audit function. What you'll do: Own and coordinate a portfolio of operational, financial, and compliance audits covering financial controls, regulatory compliance, business processes, vendor/third-party risk, and data governance in accordance with CSSF, CBL, ECB, EBA, and ESMA requirements. Shape the multi-year operational and compliance audit roadmap, coordinating coverage with co-sourced partners and aligning with enterprise risk initiatives and European regulatory frameworks (MiCA, PSD2, AMLD, DORA). Synthesize complex audit findings into high-impact reports and presentations for executive leadership, the Chief Audit Executive, Audit Committee, Board of Directors, and regulatory bodies, ensuring conclusions are rigorous, documented,

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around. What you’ll do as a Subject Matter Expert, GTM at Vanta: Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation. Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing. Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own. Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content. Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product a

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around. What you’ll do as a Subject Matter Expert at Vanta: Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation. Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing. Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own. Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content. Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product and PM

Principal Consultant – Cyber & Operational Resilience Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Strengthen cyber resilience and safeguard critical operations across financial services The Role Capco is seeking experienced Principal Consultants to join our Cyber & Operational Resilience capability within the Finance, Risk, Regulatory & Financial Crime (FRRF) practice. You'll work with senior stakeholders across financial services organisations to design and deliver cyber resilience strategies, implement robust resilience frameworks, and enhance operational resilience capabilities. This role combines strategic advisory with hands-on delivery, helping clients strengthen cyber risk management, meet evolving regulatory expectations, and build resilient operating models. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, improve delivery, and generate data-driven insights while applying responsible AI practices and appropriate human oversight. What You'll Do Deliver cyber and operational resilience transformation programmes aligned to regulatory frameworks such as PRA, DORA, and other global resilience standards, identifying opportunities to leverage AI-enabled workflows and automation. Assess and enhance cyber resilience capabilities, including resilience frameworks, operating models, controls, and governance, using AI-enabled analysis where appropriate to strengthen decision-making and operational effectiveness. Support third-party and vendor risk assessments, identifying vulnerabilities across supply chains and technology ecosystems while combining AI-enabled insights with expert judgement. Design and implement resilience governance, Important Business Services (IBS), Impact Tolerance (ITOL), scenario testing, and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised. Collaborate with technolog

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit IT Manager, you'll join the Internal Audit team and own a portfolio of complex IT and security audits across Coinbase's global cloud infrastructure, security operations, and crypto-native products. This team delivers independent, third-line assurance over technology, information security, and IT governance, helping Coinbase protect customers and maintain trust at scale. . You'll shape audit coverage, ensure that findings from complex audit work are communicated appropriately to executive and Board-level audiences, and lead team members to build a best-in-class IT audit function. What you'll do: Own and coordinate a portfolio of IT and security audits covering cloud infrastructure (AWS, GCP), application security, identity and access management, vendor/third-party risk, and blockchain-related products including wallets and cold storage. Shape the execution of the multi-year IT and security audit roadmap, coordinating coverage with co-sourced partners and aligning with enterprise risk initiatives. Synthesize complex audit findings into high-impact reports and presentations for executive leadership, the Chief Audit Executive, and the Audit Committee, ensuring conclusions are rigorous and actionable. Drive remediation strategy for IT and security findings, challenging management on risk-based solutions, validating corrective actions, and escala

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: Are you eager to make an impact in a fast-paced, agile environment? Do you have strong experience in operational risk and controls, model risk, and reporting, along with analytical and interpersonal skills and knowledge of Single-Family Acquisitions (SFA) or mortgage markets? If you are curious, passionate about learning, and customer-focused, apply for the Operational Risk Senior Manager to help lead SFA Risk Management. Our Impact: As part of Freddie Mac’s Single Family Acquisitions (SFA) organization, Operational Risk Management (ORM) drives consistency, transparency, and effectiveness in nonfinancial risk across multiple domains, including People, Reporting, Transaction and Execution, Information, Technology, Third Party, Operational Resiliency, Model, and Physical Security and Safety Risks. This role will focus on Model risk including Model Development, Implementation, Performance, Use, and Governance risks. The role will also support Artificial Intelligence (AI) risk assessments. ORM integrates: Risk and control evaluations across the Single Family Acquisitions Division Management reporting Coordination and escalation management Your Impact: As a SFA ORM Senior Manager, each workday is unique. Your impact will focus on the following key activities: Evaluate and report on operational risks, controls, issues, and policies/procedures. Document operational risks and controls as part of risk an

Our vision is to transform how the world uses information to enrich life for all. Join an inclusive team passionate about one thing: using their expertise in the relentless pursuit of innovation for customers and partners. The solutions we build help make everything from virtual reality experiences to breakthroughs in neural networks possible. We do it all while committing to integrity, sustainability, and giving back to our communities. Because doing so can fuel the very innovation we are pursuing. The Logistics Security Program Manager plays a critical role in the development, implementation, and continuous improvement of Micron’s high-value logistics security program. This role is responsible for protecting high-value and high-risk shipments by defining risk-based logistics security controls, improving cargo-level visibility, monitoring carrier and third-party logistics provider performance, and coordinating escalation, response, and recovery activities across global transportation networks. The program manager will partner closely with Global Security, Supply Chain, Procurement, Logistics, Legal, Risk, and external logistics providers to ensure Micron maintains a scalable, auditable, and response-ready operating model for high-value shipments. This role is specifically for program management of Micron’s logistics security in the Asia Pacific region. Responsibilities Serve as a subject matter expert for high-value logistics security controls across global transportation lanes, carriers, freight forwarders, and third-party logistics providers. Develop, implement, and maintain a risk-based logistics security framework for high-value and high-risk shipments, considering shipment value, commodity attractiveness, route risk, geography, modality, dwell time, subcon

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. The Logistics Security Program Manager plays a critical role in creating, applying, and improving Micron’s high-value logistics security efforts. This role centers on protecting high-value and high-risk shipments by defining risk-based security controls, boosting cargo-level visibility, tracking carrier and third-party logistics provider performance, and leading responses to customer concerns throughout global transportation networks. The program manager partners with Global Security, Supply Chain, Procurement, Logistics, Legal, Risk, and external logistics providers to ensure Micron operates a scalable, auditable, and response-ready model for high-value shipments. This role specifically covers program management in the Americas and Europe. Responsibilities: Serve as the subject matter expert for high-value logistics security, coordinating global transportation lanes, carriers, freight forwarders, and 3PL partners. Develop and uphold risk-focused logistics security frameworks and control strategies for valuable and sensitive shipments spanning various regions, routes, and transportation methods. Establish security requirements for carriers and logistics providers, including tracking, geofencing, chain of custody, tamper detection, monitoring, addressing critical issues, recovery, and compliance controls. Partner with Procurement, Logistics, Global Security, Legal, and business collaborators to integrate security requirements into contracts, operating procedures, supplier

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Based in our Dublin, Ireland office and reporting directly to the Director of Global Security & Safety , the Global Health & Safety Manager will own the design, execution, governance, and continuous enhancement of Okta’s global health, safety, and occupational wellness framework. While anchored in Dublin, this is a broad, truly global leadership role . Because Okta operates dynamic, distributed workplaces across multiple international jurisdictions, the Global Health & Safety Manager will scale operations by directing an extensive network of specialized third-party vendors, global EHS consultants, and local practitioners. In addition to overarching workplace safety, this leader serves as the global program owner for Okta’s Workers’ Compensation and Occupational Injury/Illness Claims Management . Key Responsibilities 1. 3rd-Party Vendor Management & Global Partner Ecosystem Serve as the principal manager and strategic owner of Okta’s global health and safety vendor ecosystem, including multinational EHS environmental/safety consulting firms, localized safety practitioners, and specialized service partners. Develop Statements of Work (SOWs), key performance indicators (KPIs), and service level agreements (SLAs) for external EHS partners supporting regional risk assessments, statutory testing, and compliance filings. Manage vendor procurement, contract evaluations, invoicing, and quarterly business reviews (QBRs) to ensure cost-efficienc

Who Are We HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools. HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations. Founded in 2017, HALA is currently licensed by the Saudi Arabian Central Bank. Objective We are seeking IT Audit Manager to join our team and lead audits across Information Technology, Cybersecurity, Business Continuity Management (BCM), and other technology-enabled business processes. The Senior IT Auditor will be responsible for planning and executing risk-based audits, evaluating the design and operating effectiveness of IT general controls (ITGCs), cybersecurity controls, technology governance, cloud environments, business continuity and disaster recovery capabilities, and regulatory compliance. The role also involves identifying technology risks and control deficiencies, assessing their impact on the organization, and providing practical recommendations to strengthen governance, enhance cyber resilience, improve operational effectiveness, and support compliance with applicable regulatory requirements and industry standards. Responsibilities Plan and execute risk-based IT audit engagements, including IT General Controls (ITGC), cybersecurity, cloud computing, digital platforms, data governance, business continuity management (BCM), disaster recovery (DR), third-party risk, and technology-enabled business processes. Perform audit planning activities, including risk assessments, audit scoping, control identification, and development of audit programs and testing procedures. Evaluate the design and operating effectiveness of IT controls, identify technolog

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit IT Associate Manager, you'll join the Internal Audit team and lead the execution of IT and security audits across Coinbase's global cloud infrastructure, security operations, and crypto-native products. This team delivers independent, third-line assurance over technology, information security, and IT governance, helping Coinbase protect customers and maintain trust at scale. You'll own audits end-to-end, from planning through reporting, mentor junior team members supporting your engagements, and translate complex technical findings into clear, actionable insights for senior leadership. What you'll do: Own end-to-end execution of IT and security audits covering cloud infrastructure (AWS, GCP), application security, identity and access management, vendor/third-party risk, and blockchain-related products including wallets and cold storage. Lead audit planning, fieldwork, and stakeholder management, synthesizing findings into evidence-based reports and presentations for senior leadership and the Audit Committee. Direct and develop junior audit team members supporting your engagements, providing day-to-day guidance, reviewing workpapers, and coaching on technical and professional growth. Drive continuous monitoring and validation of remediated audit findings, tracking management responses and flagging delays or emerging risk themes. Partner with Engin

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . The Singapore Operations Manager reports to the Coinbase Singapore (CBSG) Country Director and plays a critical role in scaling our regulated business under MAS. This role owns the design and execution of operational frameworks across trading, staking, and custody — ensuring CBSG operates with the rigor, resilience, and regulatory alignment expected of a licensed capital markets dealer. What You'll Do Support the Country Director in overseeing operational functions within CBSG and across intragroup and third-party providers, ensuring delivery aligns with MAS regulations and contractual obligations Implement and maintain operational policies, procedures, SLA frameworks, and risk management processes across key business workstreams Establish and maintain supervision frameworks across CBSG's trading, staking, and custody operations in line with MAS regulatory and best-practice requirements Build and maintain robust operational resilience frameworks, including risk identification, contingency planning, and vulnerability mitigation to protect business continuity Coordinate operational incident responses, facilitating timely communication with internal stakeholders, regulators, and third-party service providers Partner with cross-functional teams — including Legal, Compliance, Finance, Product, and Security — to project manage critical operations and risk-related initiativ

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . The Operations Manager will play a critical role in scaling Coinbase's regulated presence in Abu Dhabi, partnering directly with the Senior Executive Officer to drive operational excellence across it's core businesses trading. This is a high-impact role at the intersection of operational strategy, regulatory compliance, and cross-functional execution in one of the world's fastest-growing crypto markets. What You'll Do Support the Senior Executive Officer in overseeing and managing operational functions within ADGM, including intragroup and third-party service providers, ensuring delivery aligns with local regulations and contractual obligations Own the implementation of operational policies, procedures, SLA frameworks, and risk management processes across key business workstreams Establish and maintain supervision frameworks across critical business areas — including trading, staking, and custody operations — in line with regulatory and best-practice requirements Build and maintain robust operational resilience frameworks, including risk identification, contingency planning, and vulnerability mitigation to ensure continuity of critical business functions Coordinate responses to operational incidents, facilitating timely communication with internal stakeholders, regulators, and third-party service providers Develop and manage strong relationships with banks, regulator