Overview
The Third-Party Risk Program Manager is responsible for the end-to-end management of the organization’s third-party risk management program within a healthcare environment. This individual contributor role owns the program lifecycle — from vendor onboarding and risk assessment through ongoing monitoring, documentation, and offboarding — ensuring third party relationships comply with applicable healthcare regulations (e.g., HIPAA, HITECH) and internal policy. The role requires close collaboration with vendors and cross-functional partners including Legal, Information Security, Privacy, Procurement, and Compliance to ensure full program coverage and audit readiness.
Key Responsibilities
Program Management
Own and drive the third-party risk program end-to-end, ensuring consistent execution across the vendor lifecycle
Establish and maintain program timelines, milestones, and status reporting for leadership and stakeholders
Identify process gaps and drive continuous improvement of program workflows
Be a part of the team and support the execution of the program
Vendor Management
Serve as the primary point of contact for third-party vendors throughout the assessment and management process
Coordinate with vendors to gather required documentation, evidence, and remediation plans
Track vendor responsiveness and elevate delays or non-compliance issues appropriately
Risk Assessments (OneTrust)
Manage and execute third-party risk assessments using OneTrust, including assessment creation, distribution, tracking, and completion
Analyse assessment results to identify risk levels, gaps, and required remediation actions
Maintain accurate, up-to-date vendor and assessment records within OneTrust
Generate reports and dashboards from OneTrust to support program reporting and audits
Documentation & Compliance
Ensure all program documentation (policies, procedures, assessment records, contracts, remediation plans) is accurate, complete, and current
Maintain audit-ready documentation in alignment with healthcare regulatory requirements (HIPAA, HITECH, and other applicable frameworks)
Support internal and external audits by providing timely and accurate documentation
Cross-Functional Collaboration
Partner with Legal, Information Security, Privacy, Procurement, and business owners to ensure comprehensive risk coverage
Communicate program requirements, risk findings, and remediation needs clearly to non-technical and technical stakeholders alike
Act as a liaison between vendors and internal teams to resolve issues and keep the program moving forward
Education
Bachelor Level Degree (Preferred)
5+ years relevant experience may be accepted in lieu of degree
Certification/Licensure
Certification in risk, or compliance (e.g., CTPRP, CRISC) preferred
Experience
Required
Bachelor’s degree with 3+ years of experience in third-party/vendor risk management, program management, or compliance, ideally within healthcare or a regulated industry
5+ years of experience in third-party/vendor risk management, program management, or compliance, ideally within healthcare or a regulated industry without a Bachelor's degree preferred.
Hands‑on experience with OneTrust or similar GRC/risk management platforms
Working knowledge of HIPAA, HITECH, and healthcare data privacy/security requirements
Strong organizational skills with the ability to manage multiple vendors and assessments simultaneously
Excellent written and verbal communication skills, with experience working cross functionally
Preferred
Certification in risk, or compliance (e.g., CTPRP, CRISC)
Experience with vendor contract review or working alongside Legal/Procurement
Familiarity with information security risk assessment frameworks (e.g., NIST, HITRUST)
We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is: $106,080.00-$176,820.80. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.
#J-18808-Ljbffr