Lead, Risk Management

In this role, you will lead the ongoing evolution of the organization's Third-Party Risk Management program, ensuring alignment with business objectives, vendor management strategies, and regulatory expectations. You will oversee the end-to-end vendor risk lifecycle, including onboarding, inherent risk tiering, security due diligence, continuous monitoring, remediation tracking, and offboarding activities. Working closely with senior leadership, you will help define the strategic roadmap for TPRM and GRC platforms while driving configuration, optimization, and adoption of solutions such as ServiceNow GRC, Archer, or MetricStream. You will assess and prioritize vendor-related cyber risks, establish mitigation strategies, support risk acceptance decisions, and provide executive-level reporting on the organization's third-party risk posture. Additionally, you will develop and maintain policies, standards, and procedures, support audits and regulatory reviews, train stakeholders on risk management requirements, partner cross-functionally with Procurement, Legal, Privacy, and business teams, and serve as the escalation point for high-risk or non-compliant vendors. Throughout the role, you will identify opportunities for automation and process improvement to increase efficiency, scalability, and overall risk visibility across the enterprise.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• 5–7+ years of experience in Information Security, Information Technology, Risk Management, Audit, or a related discipline.
• 5–7+ years of experience leading projects, programs, or teams.
• Proven experience managing Third-Party Risk Management (TPRM) programs across the full vendor lifecycle, including onboarding, risk assessments, continuous monitoring, and offboarding.
• Strong understanding of cyber risk management, threat modeling, risk assessment methodologies, and risk mitigation strategies.
• Experience developing and enhancing TPRM frameworks, including risk scoring models, assessment methodologies, evidence review processes, and control validation procedures.
• Hands-on experience with GRC platforms such as ServiceNow GRC, RSA Archer, MetricStream, or similar solutions.
• Experience configuring and optimizing TPRM workflows, including vendor intake, assessment management, automated risk scoring, remediation tracking, and reporting.
• Strong knowledge of industry security frameworks and standards, including NIST CSF and ISO 27001.
• Experience partnering with Procurement, Legal, Privacy, and business stakeholders to integrate security and risk requirements into vendor management processes.
Experience supporting audits, regulatory assessments, and risk governance reviews as a subject matter expert.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.