Third Party Risk Manager

State Teachers Retirement System of Ohio•Columbus, OH

4d•Onsite

About The Position

STRS Ohio, STRS The State Teachers Retirement System of Ohio (STRS Ohio) is seeking a Third Party Risk Manager to join the Executive/Business Operations and Security team. Established in 1920 and serving Ohio’s educators, STRS Ohio is one of the nation’s largest retirement systems, serving nearly 550,000 active, inactive, and retired public-school teachers, and university faculty members, managing approximately $96.3 billion as of June 30, 2025, in assets and paying more than $7 billion in benefits annually. STRS Ohio provides a competitive pay, and a comprehensive benefits package including on-site parking, educational assistance, subsidized medical insurance, fully paid dental and life insurance, vacation and sick leave, retirement benefits and on-site fitness center. At STRS Ohio, you can experience rewarding work in a professional, business casual work environment. We welcome, celebrate, and promote respect for everyone. We are continually seeking bright and talented individuals to join our team.

Requirements

Bachelor's degree in computer science, business administration, risk management or related field required.
Three or more years’ information technology and third-party risk management experience required.
Knowledge of and experience with the following: Third-party risk management frameworks, methodologies and industry best practices required.
Regulatory and risk frameworks

Nice To Haves

Experience with third party risk management (TPRM) software platforms and risk data analysis/reporting tools preferred.
Familiarity with AI/machine learning risk considerations in vendor relationships preferred.

Responsibilities

Develop, implement and continuously improve the organization's third-party risk management strategy, policy and procedures ensuring effective oversight of vendor relationships.
Lead the development of pre-contract and self-attestation questionnaires to be completed by prospective and current STRS Ohio vendors.
Monitor questionnaire completion, coordinating with vendors and internal stakeholders.
Tailor due diligence requirements and questionnaire content based on the vendor's risk profile, criticality and service type.
Review and assess vendor contracts to ensure appropriate risk mitigation, including information security, artificial intelligence (AI)/machine learning use and software supply chain protections.
Facilitate risk assessments to identify, evaluate and prioritize third-party risks, including subcontractor dependency, operational resilience and emerging threats.
Assess third-party relationships for geopolitical, sanctions, and ownership-structure risk in coordination with Sourcing and Vendor Management and Legal/Compliance.
Monitor applicable regulatory, cybersecurity and industry developments and recommend enhancements to the TPRM program to address evolving risks and best practices.