Ethics & Compliance Third-Party Risk, Senior Manager

Booz Allen Hamilton•McLean, VA

5h•Remote

About The Position

Third-party relationships are central to how Booz Allen delivers technology, services, and mission outcomes at scale. As those relationships grow in complexity, so do the risks they can introduce—from compliance and reputational risk to supplier conduct, cybersecurity, privacy, legal, and enterprise risk considerations. As the Ethics & Compliance Third-Party Risk Lead, you’ll play a strategic role in Booz Allen’s established enterprise Third-Party Risk Management program, serving as an advisor to Global Supply Chain, business leaders, and cross-functional risk partners. You’ll help strengthen an already mature foundation by advancing practical, risk-based processes that support effective third-party due diligence, escalation, monitoring, issue management, and decision-making. This is a high-impact role for a proven program leader who can bring rigor, curiosity, creativity, strong project and process discipline, and sound analytical judgment to help identify potential risks in an open, collaborative environment where new ideas and solutions are welcomed. You’ll have the opportunity to shape how Booz Allen continues to mature third-party risk governance, build trusted partnerships, and support defensible risk decisions across the third-party lifecycle. Due to the nature of work performed within this facility, U.S. citizenship is required.

Requirements

10+ years of experience in ethics and compliance, third-party risk, supplier risk, enterprise risk, compliance operations, legal, audit, or procurement risk
Experience leading or improving third-party risk and supplier due diligence programs, including sanctions, anti-corruption, conflicts, adverse media, reputational risk, and supplier conduct
Experience working across multiple functions, such as Global Supply Chain, Procurement, Legal, Cybersecurity, Privacy, Security, Finance, Enterprise Risk, Internal Audit, or business operations
Experience turning risk or compliance requirements into clear workflows, controls, procedures, reporting, and practical guidance
Experience leading complex programs with senior stakeholders, competing priorities, and enterprise visibility
Bachelor’s degree in Business, Supply Chain, Risk Management, Public Policy, Technology, or Legal Studies

Nice To Haves

Experience in a technology, product, software, SaaS, data, AI, or cyber company
Experience in government contracting, professional services, defense, national security, regulated industries, or federal customer environments
Experience with third-party risk platforms, GRC tools, procurement systems, ERP platforms, contract lifecycle systems, supplier master data tools, or compliance screening tools
Experience improving policies, standards, procedures, playbooks, escalation frameworks, risk acceptance processes, or governance charters
Experience developing executive dashboards, KPIs, KRIs, issue reporting, remediation tracking, or audit-ready documentation
Experience developing third-party risk remediation and monitoring plans, including working with Legal or other stakeholders to align risk mitigation steps, contractual protections, follow-up actions, and ongoing oversight
Experience defining requirements for compliance, risk, procurement, GRC, screening, or third-party risk technology
Industry certifications in operational risk management, third-party risk management, compliance, audit, or related disciplines

Responsibilities

Lead risk and compliance advisory support for Booz Allen’s enterprise Third-Party Risk Management program, enhancing established processes, governance, and controls.
Oversee third-party risk review areas, including sanctions, restricted parties, anti-bribery and anti-corruption, conflicts of interest, adverse media, reputational risk, and supplier conduct.
Define and refine ethics, compliance, and related risk requirements across the third-party lifecycle, including intake, risk tiering, due diligence, onboarding, monitoring, reassessment, escalation, and offboarding.
Serve as a strategic advisor to Global Supply Chain, Procurement, and business stakeholders by identifying, surfacing, and contextualizing compliance, operational, and reputational risks across vendors, subcontractors, business partners, customers, and other third parties.
Partner with Legal, Security, Compliance, Privacy, Trade, ABAC, Compliance, ESG, Cybersecurity, Enterprise Risk, Internal Audit, and business leaders to support coordinated, risk-informed decisions.
Define business requirements for third-party risk technology, including workflows, data fields, screening triggers, dashboards, reporting, and issue tracking.
Strengthen escalation, issue management, and risk acceptance processes, including practical guidance for consistent and defensible third-party risk decisions.
Develop training, education, and guidance for business teams, and contribute to third-party-facing content that helps stakeholders understand, identify, and manage third-party risk in delivery and business engagements.
Establish program metrics, SLAs, KPIs, KRIs, and board and senior leadership materials while leading, coaching, and developing a team of 1–3 direct reports.