TPRM Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
TPRM Consultant building and operating vendor risk management program for certification readiness and compliance initiatives. Engaging in cross-functional coordination and support for audits and assessments.
Responsibilities:
- Develop and build an end-to-end TPRM Program - onboarding, risk assessments, performance monitoring, and offboarding
- Support ISO 27001 audit readiness activities, including gap assessments and remediation tracking as needed.
- Assess third-party/vendor risk exposure and ensure compliance with security and regulatory requirements.
- Coordinate with internal stakeholders (IT, Legal, Security, Procurement) to align the TPRM Program with existing frameworks
- Develop and build the vendor risk registers, compliance trackers, and audit documentation as the single source of truth, keeping it current and audit-ready
- Support internal and external audits, liaising with certification bodies as needed
- Design the TPRM policy, procedure, and risk-tiering methodology (critical/high/medium/low based on data access, business impact, and regulatory exposure)
- Build vendor risk assessment templates (SIG/CAIQ-aligned questionnaires, DPIA triggers for vendors processing personal data)
- Establish the vendor inventory/register and define onboarding, monitoring, and offboarding workflows
- Recommend standard security/privacy contract clauses and Data Processing Agreement (DPA) templates for Legal and Procurement to adopt
- Own and execute the full vendor risk assessment lifecycle across all tiers on the defined cadence (e.g., annual for critical, biennial for lower risk)
- Continuously monitor vendor risk posture (security ratings platforms, incident tracking, contract or scope changes) and reassess as needed
- Coordinate with Legal/Procurement on contract renewals, DPA updates, and sub processor changes
- Support internal and external audits (ISO 27001, customer security reviews) with TPRM evidence and documentation
- Prepare and present vendor risk metrics, top risks, and program status to leadership/risk committee on a regular cadence (e.g., monthly or quarterly)
- Provide guidance and light training to internal stakeholders (Procurement, business owners) on TPRM policy and process
- Develop the SOP for managing vendor offboarding, including secure data return/destruction confirmation and access revocation tracking
- Periodically refine the program (policy updates, template improvements, tooling optimization) as the vendor landscape and regulatory environment evolve
- Reduce weekly hours once the vendor register is complete and the first full assessment cycle has closed, in agreement with the organization.
Requirements:
- Proven experience in Vendor/Third-Party Risk Management
- Solid background in GRC frameworks and practices
- Experience preparing organizations for ISMS certification
- Hands-on experience with ISO 27001 auditing (internal or external)
- Familiarity with risk assessment methodologies and compliance reporting
- Strong stakeholder management and cross-functional coordination skills
- Strong working knowledge of ISO 27001, SOC 2, NIST CSF/800-53, GDPR (Art. 28, 32), and CCPA
- Hands-on experience reviewing SOC 2 reports, ISO certificates, penetration test results, and vendor security questionnaires (SIG, CAIQ)
- Experience drafting or advising on DPAs, security addenda, and sub-processor clauses
- Comfortable operating as the embedded/de facto TPRM function — proactive, autonomous, and reliable on a recurring cadence rather than a one-time deliverable
- Strong written and verbal communication skills, including presenting to executive stakeholders
- Available for a sustained, ongoing commitment: 15–20 hours/week during the build phase, reducing thereafter.
Benefits:
- None specified
Similar Jobs
Consultor(a) Apigee – API Management
Consultant specialized in Google Apigee for API Management projects, focusing on configuration and implementation with cloud integrations.
Senior Consultant – Sustainable Land Management
Senior Consultant providing technical expertise in Sustainable Land Management for BwB. Working with communities across Andhra Pradesh and Karnataka to promote sustainable land and water use.
Technical Consultant in Financing for Agricultural Transition
Technical Consultant developing financial recommendations for sustainable agriculture transition in Brazil. Collaborating with financial institutions to support agricultural policy improvements.
Gender and Inclusion Consultant
Consultant providing gender expertise for the International Fund for Public Interest Media in its Syria programme. Working on grant management and promoting gender inclusion in journalism.
Marketo Consultant – 6 Month Fixed Term Contract
Marketo Consultant serving as the lead practitioner on high-value client engagements. Delivering top-tier implementations and managing client relationships in a remote role.
Senior Consultant, Professional Services
Consultant/Senior Consultant in Professional Services for EDB specializing in Postgres and data engineering. Customer-facing role focused on database migrations and data engineering solutions.
Senior SuccessFactors Consultant – Time Off, Time Tracking
Senior Consultant delivering SuccessFactors Time Off & Time Tracking solutions at DyFlex. Collaborating with clients and teams to implement high-quality HR solutions.
Senior Consultant, MM/WM/EWM
Senior Consultant for inventory management solutions at a tech firm, facilitating business requirements analysis and system configurations. Emphasizes innovation and diversity while working remotely.
BLP Consultant
BLP Consultant enhancing SAP processes using AI for automation, focusing on customer consulting and solution optimization. Partnering with clients to design efficient digital processes.
Managing Consultant – Revenue Integrity, Healthcare
Managing Consultant focusing on revenue integrity analysis within healthcare consulting. Collaborating with teams to optimize financial management and operational strategies for clients.
Solution Consultant – Carbon
Solution Consultant providing pre-sales support in developing and presenting Workiva's Carbon solution for clients. Aiming to remove technical barriers in the sales cycle while demonstrating value-based messaging.
VIM Consultant, OpenText
Consultor SAP VIM (Vendor Invoice Management) for Azapi Solutions. Implementing, supporting, and improving SAP VIM solutions.
Consultant – Indirect Spend
Consultant coordinating engagements in healthcare systems to identify cost savings and improve operations. Collaborating with cross-functional teams and utilizing project management methodologies.
Workday Integrations Principal Consultant
Principal Workday Integrations Consultant at ERPA specializing in leading Workday implementations and providing ongoing support across various industries.
Associate Technical Consultant – Cranial and Spinal Technologies
Associate Technical Consultant for Cranial and Spinal Technologies supporting medical professionals in surgeries. Collaborating with sales and clinical teams to enhance patient care in Baden-Württemberg.
Consultant, Professional Services – Equity Management
Equity Services Consultant managing intricate equity transactions and driving automation innovations at insightsoftware. Collaborating with clients and teams on compliance and best practices in equity management.
Lead Consultant
Lead Data Migration Consultant managing teams and delivering data projects for a global consultancy. Focused on data transformation using Syniti's tools and methodologies.
Managing Consultant
Data Migration Managing Consultant managing lead data migration consultants for global data projects at Syniti. Collaborating with customer resources to ensure project success and high-quality data delivery.
MCAD Solution Consultant
MCAD Solutions Consultant leading successful customer deployments of CAD to PLM solutions. Implementing XPLM products and processes while collaborating with technical teams.
Workday HCM Consultant
Workday HCM Consultant developing solutions in the Workday project lifecycle for global clients. Leading client deliverables while ensuring quality execution of projects across multiple domains.