Vendor & Contract Manager

Key Responsibilities

• Lead third-party risk management (TPRM), vendor risk assessments, and ongoing compliance monitoring.
• Review SOC 1/SOC 2 Type II reports, ISO certifications, and independent security attestations.
• Manage IT audit findings, root-cause analysis, remediation plans, and evidence validation.
• Develop and maintain IT security, privacy, governance policies, standards, and SOPs.
• Ensure compliance with IT General Controls (ITGC), NIST, ISO 27001, and applicable state and federal requirements.
• Partner with Legal and Procurement on vendor contracts, SLAs, data-sharing agreements, and audit rights.
• Present enterprise risk metrics, audit status, and mitigation strategies to the CIO and executive leadership.