8 third party risk manager jobs at 6 companies in Sutton, MA

3mo
Save
Mark Applied
Hide
Senior Director, Enterprise Third Party Risk
Boston, Massachusetts, United States
$220k-$330k/yr HybridFull Time
Vertex Pharmaceuticals
Vertex PharmaceuticalsNASDAQ: VRTX: Develops and sells prescription drugs for serious genetic diseases.
12+ YOELeads enterprise third-party risk management; 12+ years in risk; university degree in accounting/finance/risk; professional certifications preferred; experience in a multinational company; strong communication and governance skills.
Risk management software, CRM, General business analytics tools
1mo
Save
Mark Applied
Hide
AI Risk & Compliance Analyst
Boston, Massachusetts, United States
$100k-$140k/yr OnsiteFull Time
WHOOP
WHOOP: Wearable technology for personalized health and performance tracking.
6+ YOE6+ years in GRC with AI/ML risk assessment, third-party risk management, policy development, audit coordination, and mapping controls to standards; bachelor’s degree in related field.
ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk Management Framework, EU AI Act, GDPR, PCI DSS, LLM
2w
Save
Mark Applied
Hide
Information Security Risk and Compliance Analyst
Boston, Massachusetts, United States
$84k-$106k/yr HybridFull Time
CarGurus
CarGurusNASDAQ: CARG: Operates an online marketplace for buying and selling vehicles.
Manage third-party risk, customer security assurance, cyber risk, SOX ITGCs and governance; experience with GRC platforms, cloud environments, and security/IT certifications.
Auditboard, SAFE, Loopio
3w
Save
Mark Applied
Hide
Assoc Dir, Information Security Governance Risk & Compliance
Boston, Massachusetts, United States
$179k-$212k/yr HybridFull Time
Servier
Servier: Independent global pharmaceutical group developing innovative treatments for patients.
8+ YOE3+ Mgmt8+ years in information security GRC or related discipline, 3+ years leadership, expertise with risk frameworks, audit readiness, third-party risk, and strong executive communication.
NIST CSF 2.0, ISO 27001, PCI, SOX, FAIR
2w
Save
Mark Applied
Hide
Director, Internal Audit - Operational Risk
Hillsboro or Marlborough or Chelmsford
$164k-$197k/yr HybridFull Time
First Tech Federal Credit Union
First Tech Federal Credit Union: Member-owned financial cooperative providing banking and wealth management services.
8+ YOE4+ Mgmt8+ years internal audit experience, 4+ years leading teams, expertise in operational/third-party/BCDR/MRM risk, strong regulatory knowledge, executive reporting experience; preferred certifications: CIA, CRMA, CRISC, CISA, FRM, CRCM, PMP.
2w
Save
Mark Applied
Hide
Director, Internal Audit - Operational Risk
Hillsboro or Marlborough or Chelmsford
$164k-$197k/yr HybridFull Time
First Tech Federal Credit Union
First Tech Federal Credit Union: Member-owned financial cooperative providing banking and wealth management services.
8+ YOE4+ Mgmt8+ years internal audit experience, 4+ years leading teams, experience with ERM/operational/third-party/BCDR/MRM, strong analytical and communication skills; CIA/CRMA/CRISC/CISA/FRM/CRCM/PMP preferred.
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Framingham, Massachusetts, United States
$85k-$115k/yr HybridFull Time
HealthDrive
HealthDrive: Provides on-site medical services for residents in long-term care.
10+ YOEHands-on infrastructure and cloud security engineer with experience building and operating firewalls, endpoint/email protection, cloud security in Azure, vulnerability management, incident response, and third-party risk management.
Fortinet, Microsoft Active Directory, Microsoft 365, Azure, Palo Alto, Proofpoint, SecureWorks, Qualys, PowerShell, Python, Bash, Microsoft Sentinel, Okta
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Framingham, Massachusetts, United States
$85k-$115k/yr HybridFull Time
HealthDrive
HealthDrive: Provides on-site healthcare services for long-term care facilities.
10+ YOEInfrastructure-focused security engineering for on-prem and Azure: firewalls, endpoint/email protection, cloud security, vulnerability management, incident detection/response, third-party risk and HIPAA compliance.
Fortinet, Microsoft Active Directory, Microsoft 365, Azure, Palo Alto, Proofpoint, SecureWorks, Qualys, PowerShell, Python, Bash, Microsoft Intune, Microsoft Sentinel, Okta