Third-Party Risk Management Program Manager
About The Position
C.H. Robinson is seeking a strategic Third-Party Risk Management (TPRM) Program Manager to lead and strengthen our enterprise-wide approach to managing third-party risk, helping protect the organization while enabling informed business decisions. In this role, you will drive the end-to-end TPRM program, partnering across Legal, Information Security, Privacy, Procurement, and business teams to assess, mitigate, and govern vendor risk throughout the supplier lifecycle. You will shape program strategy, influence executive decision-making through meaningful risk insights, and enhance processes that improve compliance, scalability, and operational effectiveness. If you're passionate about building risk-aware partnerships and driving enterprise impact, we encourage you to apply. At C.H. Robinson, we’re firm believers in the power of in-person collaboration to fuel innovation and propel success. In this role, you will engage with peers on-site two days a week, igniting creativity and driving impactful results. With the flexibility for remote work three days a week, this role strikes the perfect balance between teamwork and autonomy. The internal deadline to apply is Wednesday, August 12th at 12:00 pm CST.
Requirements
- Bachelor’s degree from an accredited college or university and/or equivalent working experience
- Minimum of 6-8 years’ experience in Third-Party Risk Management, Vendor Risk, or Supplier Governance, Procurement, Sourcing, Compliance, Audit, and/or Information Security
Nice To Haves
- Experience in Third-Party Risk Management, Vendor Risk, Supplier Governance, or enterprise risk program management
- Experience in Procurement, Sourcing, Compliance, Audit, Information Security, Privacy, or Business Continuity
- Strong understanding of the third-party risk lifecycle and risk concepts, including inherent and residual risk
- Experience operating in cross-functional, matrixed environments
- Demonstrated ability to influence senior stakeholders, drive remediation accountability, and escalate material risks without direct authority
- Experience preparing leadership-level reporting, risk summaries, decision options, and audit-ready documentation
- Experience implementing risk acceptance, remediation tracking, issue management, or governance reporting processes
- Experience in a Procurement-led or intake-to-pay operating model
- Familiarity with TPRM and procurement platforms (e.g., Coupa, Levelpath, ServiceNow, CyberGRX)
- Certifications such as CTPRP, CRISC, CISA, or similar
- Strong program management, governance, and process ownership mindset
- Ability to translate technical and regulatory risk into business impact
- Excellent stakeholder coordination, influence, and escalation management across multiple functions
- Ability to challenge incomplete reviews, unresolved remediation, or risk acceptance gaps while maintaining a business-enabling approach
- Detail-oriented with strong documentation and audit discipline
- Pragmatic problem-solver with a balance of risk awareness and business enablement
- Values a diverse and inclusive work environment
Responsibilities
- Lead and evolve the enterprise Third-Party Risk Management (TPRM) program strategy, governance framework, and roadmap to strengthen risk management practices across the organization
- Establish and maintain risk-based standards, policies, and governance processes that support informed business decision-making
- Manage vendor intake, risk tiering, and due diligence processes for new suppliers, renewals, and significant changes to existing engagements
- Partner with Legal, Information Security, Privacy, Business Continuity, Procurement, and business leaders to assess, manage, and mitigate third-party risks
- Drive cross-functional risk reviews, remediation efforts, and escalation activities to address high-priority vendor risks and compliance concerns
- Monitor third-party risk throughout the vendor lifecycle, ensuring timely follow-up, remediation tracking, and risk acceptance governance
- Develop dashboards, metrics, and executive-level reporting that provide visibility into vendor risk exposure, program performance, and emerging trends
- Identify opportunities to enhance program effectiveness, scalability, and operational efficiency while addressing evolving regulatory and business requirements
- Promote adherence to procurement processes, approved purchasing channels, and vendor governance requirements to reduce organizational risk
- Support sourcing, vendor selection, and contracting activities by ensuring third-party engagements meet risk management standards before execution
Benefits
- Three medical plans which include Prescription drug coverage
- Enhanced Fertility benefits
- Flexible Spending Accounts
- Health Savings Account (including employer contribution)
- Dental and Vision
- Basic and Supplemental Life Insurance
- Short-Term and Long-Term Disability
- Paid observed holidays
- 2 paid floating holidays for U.S. hourly employees
- Flexible Time Off (FTO) offered to U.S. salaried employees — no accruals and no caps. Paid Time Off (PTO) offered to all other employees in the U.S. and Canada
- Paid parental leave
- Paid time off to volunteer in your community
- Charitable Giving Match Program
- 401(k) with 6% company matching
- Employee Stock Purchase Plan
- Plus a broad range of career development, networking, and team-building opportunities
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
