Manager, Third Party Risk

Quality Technology Services•Overland Park, KS

About The Position

The Manager, Third-Party Risk Management (TPRM) leads the enterprise’s third-party risk management program and team. This role governs, executes, and continually improves processes to identify, assess, monitor, and manage risks associated with suppliers, service providers, and technology vendors. The manager partners with Procurement, Safety, Privacy, Legal, and business stakeholders to ensure third-party risks are appropriately managed while supporting business objectives. The role leads and develops the TPRM team; oversees vendor risk assessments, due diligence, issue management, continuous monitoring, reporting, program policies and methodologies, and supporting technologies. It serves as an escalation point for high-risk vendors, significant findings, risk acceptances, and remediation activities; leads governance forums and steering committees; provides executive reporting and actionable risk insights; and drives improvements in program efficiency, scalability, and risk visibility.

Requirements

Bachelor’s degree or equivalent professional experience.
Five or more years of experience in Third-Party Risk Management, Vendor Risk Management, Information Security, Procurement, Risk Management, or related fields.
Three or more years of leadership experience.
Proven ability to lead risk-based governance programs and cross-functional initiatives.
Experience managing and optimizing third-party risk management technologies and related business processes.
Expertise in conducting and overseeing vendor risk assessments and remediation activities.
Strong knowledge of third-party risk management principles, vendor governance, due diligence practices, and third-party risk lifecycle management.
Ability to lead and influence cross-functional stakeholders without direct authority.
Strong analytical, problem-solving, and decision-making skills.
Excellent verbal, written, and executive-level communication skills.
Ability to translate complex risk issues into clear business impacts and recommendations.
Demonstrated ability to build, mature, and optimize risk programs through effective processes, technology, and reporting.

Nice To Haves

Experience supporting large-scale technology, data centers, critical infrastructure, or cloud environments.
Experience implementing and managing governance, risk, compliance, or third-party risk management platforms.
Professional certifications such as CRISC, CISA, CISSP, CISM, CTPRP, or equivalent.

Responsibilities

Lead and develop the Third-Party Risk Management team, including workload planning, performance management, and employee development.
Manage the enterprise TPRM program, including vendor risk assessments, due diligence, issue management, continuous monitoring, and reporting.
Establish and maintain TPRM policies, standards, procedures, and risk methodologies.
Serve as an escalation point for high-risk vendors, significant findings, risk acceptances, and remediation activities; drive cross-functional alignment and ensure risks are reviewed, communicated, and addressed.
Oversee TPRM platforms and supporting technologies, including platform strategy, configuration, process optimization, reporting, automation, and overall program effectiveness.
Build partnerships with Procurement, Legal, Safety, Privacy, Business Continuity, and business owners throughout the vendor lifecycle.
Lead and steward TPRM governance forums and steering committees while partnering with stakeholders involved in technology review and approval processes.
Provide executive reporting and actionable insights regarding vendor risk exposure, emerging risks, program performance, and risk mitigation activities.
Drive continuous improvement initiatives to increase efficiency, scalability, and risk visibility across the enterprise.
Perform other duties as assigned.