Senior IT Compliance & Third-Party Risk Manager (Vendor Governance, IT Audit & Security)

***Only qualified Senior IT Compliance & Third-Party Risk Manager – Vendor Governance, IT Audit & Security candidates located at the Trenton, NJ area to be considered due to the position requiring an onsite presence***

Required Education

• Bachelor’s Degree
  
  

Required Skills

• IT Compliance, ITGC & Audit Governance in Enterprise Environments (8 Years)
• Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies (7 Years)
• Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans (7 Years)
• Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks (7 Years)
  
  

Preferred Skills

• Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification (7 Years)
• Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations (7 Years)
  
  

Summary: We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management across our technology ecosystem.

Responsibilities

• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.
• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.
• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.
• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.
• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.
  
  

***Note: This is a hybrid position - 3 days on-site, and 2 days remote***

• **Only those lawfully authorized to work in the designated country associated with the position will be considered.**
• **Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.**
  
  

About Rose

• Founded in 1993
• Office Locations Across the U.S.
• 150 Clients: Corporations and Government Agencies
• Employee Oriented Company
• Challenging Assignments Across the U.S.
• Continuous Professional Development
  
  

EMPLOYEE COMMENTS

• We want you to work with us, but don't take our word for it. Take a look at this sampling of employee comments. They speak for themselves.