Vendor & Contract Manager
Mohammed SohailUnited StatesSENIORPosted 1h ago
IT complianceITGCaudit governanceIT security policiesregulatory complianceaudit remediationroot-cause analysisNIST SP 800-53/CSFISO 27001TPRMcloud/SaaS vendor assessmentsSOC 1/SOC 2 Type II reports
About the Role
We are seeking an experienced Vendor & Contract Manager to work directly with the Chief Information Officer (CIO), leading third-party risk management, IT audit readiness, vendor compliance, and enterprise technology governance.
Key Responsibilities
• Lead Third-Party Risk Management (TPRM) and vendor compliance oversight
• Manage IT audit readiness, SOC 1/SOC 2 Type II reports, and ISO certifications
• Drive audit finding remediation, root-cause analysis, and corrective action plans
• Develop and maintain IT security, privacy, governance policies, and SOPs
• Ensure compliance with NIST, ISO 27001, IT General Controls (ITGC), and regulatory requirements
• Partner with Legal and Procurement on SLAs, data-sharing agreements, and vendor contracts
• Prepare executive risk scorecards, audit dashboards, and compliance reports for the CIO
Requirements
• 8+ years of experience in IT compliance, ITGC, and audit governance
• 7+ years of experience in enterprise IT security policies and regulatory compliance
• 7+ years of experience in audit remediation and technical root-cause analysis
• Strong knowledge of NIST SP 800-53/CSF and ISO 27001 frameworks
• Experience with TPRM, cloud/SaaS vendor assessments, and SOC 1/SOC 2 Type II reports is highly desirable
• Bachelor's degree required