What are the responsibilities and job description for the Manager - IT Vendor Management (Hybrid/Troy, MI) - Health Alliance Plan position at Henry Ford Health System?
This manager role will require at least 3 days a week in person at the Health Alliance Plan building in Troy, MI.
General Summary:
The Manager, IT Vendor Management is a strategic leadership role responsible for overseeing enterprise-wide vendor relationships, third-party risk management, and sourcing activities across both healthcare operations and the Information & Technology (I&T) function. This role ensures that vendors are selected, contracted, monitored, and governed in alignment with organizational strategy, regulatory requirements, cybersecurity and data protection standards, and operational needs.
In addition to leading traditional vendor management and procurement activities, this position serves as a key partner to the Information & Technology team-supporting IT vendor sourcing, technology contract oversight, cybersecurity and third-party risk coordination, and ongoing vendor performance management. The role operates at the intersection of procurement, risk, compliance, and technology enablement, driving value, resilience, and accountability across the vendor lifecycle.
Principle Duties & Responsibilities:
Education/Experience Required:
Knowledge, Skills, and Abilities:
General Summary:
The Manager, IT Vendor Management is a strategic leadership role responsible for overseeing enterprise-wide vendor relationships, third-party risk management, and sourcing activities across both healthcare operations and the Information & Technology (I&T) function. This role ensures that vendors are selected, contracted, monitored, and governed in alignment with organizational strategy, regulatory requirements, cybersecurity and data protection standards, and operational needs.
In addition to leading traditional vendor management and procurement activities, this position serves as a key partner to the Information & Technology team-supporting IT vendor sourcing, technology contract oversight, cybersecurity and third-party risk coordination, and ongoing vendor performance management. The role operates at the intersection of procurement, risk, compliance, and technology enablement, driving value, resilience, and accountability across the vendor lifecycle.
Principle Duties & Responsibilities:
- Lead and oversee third-party risk management activities across the vendor lifecycle, including intake, assessment, monitoring, remediation tracking, and renewals.
- Identify and monitor vendor risks related to cybersecurity, privacy, compliance, operational resiliency, and financial exposure.
- Act as the primary Vendor Management liaison with Cybersecurity, GRC, Compliance, Legal, and Privacy teams.
- Ensure risk findings inform sourcing decisions, contract terms, renewals, remediation plans, and executive escalation.
- Maintain audit-ready documentation.
- Serve as the primary Vendor Management partner to the I&T organization.
- Support IT vendor sourcing, contract review, cybersecurity risk assessments, onboarding, integrations, and renewals.
- Address vendor performance issues, SLA breaches, and remediation plans.
- Assist in Leading Executive Vendor Oversight (EVOC) and support Delegated Vendor Oversight Committee (DVOC) meetings.
- Develop governance frameworks and executive reporting.
- Develop scorecards, dashboards, and category strategies.
- Identify optimization opportunities and sourcing events.
- Oversee RFP/RFQ/RFI processes.
- Partner with Legal to ensure risk-aligned contracts.
- Oversee procure-to-pay systems (e.g., Zycus).
- Drive continuous process improvement.
- Lead Vendor Management staff.
- Foster strong cross-functional partnerships.
Education/Experience Required:
- Bachelor's degree or equivalent experience.
- Eight (8) years of vendor management or related experience.
- Demonstrated IT vendor management experience.
- Healthcare or financial services experience, preferred.
- Third-party risk or cybersecurity exposure, preferred.
- Familiarity with Zycus, Bonfire, or ServiceNow, preferred.
Knowledge, Skills, and Abilities:
- Enterprise vendor management
- IT contract management
- Third-party risk and compliance governance
- Executive communication