Program Manager – Third Party Risk Management

Program Manager – Third Party Risk ManagementSkip to main content#Program Manager – Third Party Risk Management page is loaded## Program Manager – Third Party Risk ManagementApplyremote type: Remotelocations: Norfolk, VA: Remote - NV: Remote - FL: Remote - WV: Remote - DEtime type: Full timeposted on: Posted Todayjob requisition id: JR- **City/State**Norfolk, VA**Work Shift**First (Days)**Overview:**# **Overview**The Third-Party Risk Program Manager is responsible for the end-to-end management of the organization’s third-party risk management program within a healthcare environment. This individual contributor role owns the program lifecycle — from vendor onboarding and risk assessment through ongoing monitoring, documentation, and offboarding — ensuring third party relationships comply with applicable healthcare regulations (e.g., HIPAA, HITECH) and internal policy. The role requires close collaboration with vendors and cross-functional partners including Legal, Information Security, Privacy, Procurement, and Compliance to ensure full program coverage and audit readiness**Key Responsibilities****Program Management*** Own and drive the third-party risk program end-to-end, ensuring consistent execution across the vendor lifecycle* Establish and maintain program timelines, milestones, and status reporting for leadership and stakeholders* Identify process gaps and drive continuous improvement of program workflows* Be a part of the team and support the execution of the program**Vendor Management*** Serve as the primary point of contact for third-party vendors throughout the assessment and management process* Coordinate with vendors to gather required documentation, evidence, and remediation plans* Track vendor responsiveness and escalate delays or non-compliance issues appropriately**Risk Assessments (OneTrust)*** Manage and execute third-party risk assessments using OneTrust, including assessment creation, distribution, tracking, and completion* Analyze assessment results to identify risk levels, gaps, and required remediation actions* Maintain accurate, up-to-date vendor and assessment records within OneTrust* Generate reports and dashboards from OneTrust to support program reporting and audits**Documentation & Compliance*** Ensure all program documentation (policies, procedures, assessment records, contracts, remediation plans) is accurate, complete, and current* Maintain audit-ready documentation in alignment with healthcare regulatory requirements (HIPAA, HITECH, and other applicable frameworks)* Support internal and external audits by providing timely and accurate documentation**Cross-Functional Collaboration*** Partner with Legal, Information Security, Privacy, Procurement, and business owners to ensure comprehensive risk coverage* Communicate program requirements, risk findings, and remediation needs clearly to non-technical and technical stakeholders alike* Act as a liaison between vendors and internal teams to resolve issues and keep the program moving forward# **Education*** Bachelor Level Degree (Preferred)* *5+ years relevant experience may be accepted in lieu of degree*# # **Certification/Licensure*** Certification in risk, or compliance (e.g., CTPRP, CRISC) preferred# **Experience****Required*** Bachelor’s degree with 3+ years of experience in third-party/vendor risk management, program management, or compliance, ideally within healthcare or a regulated industry* 5+ years of experience in third-party/vendor risk management, program management, or compliance, ideally within healthcare or a regulated industry without a Bachelor's degree preferred.* Hands-on experience with OneTrust or similar GRC/risk management platforms* Working knowledge of HIPAA, HITECH, and healthcare data privacy/security requirements* Strong organizational skills with the ability to manage multiple vendors and assessments simultaneously* Excellent written and verbal communication skills, with experience working cross functionally**Preferred*** Certification in risk, or compliance (e.g., CTPRP, CRISC)* Experience with vendor contract review or working alongside Legal/Procurement* Familiarity with information security risk assessment frameworks (e.g., NIST, HITRUST)We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is:$106,080.00-$176,820.80. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities. **Benefits: Caring For Your Family and Your Career****•** Medical, Dental, Vision plans• Adoption, Fertility and Surrogacy Reimbursement up to $10,000• Paid Time Off and Sick Leave• Paid Parental & Family Caregiver Leave• Emergency Backup Care• Long-Term, Short-Term Disability, and Critical Illness plans• Life Insurance• 401k/403B with Employer Match• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education• Student Debt Pay Down – $10,000•Pet Insurance •Legal Resources Plan •Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.**Sentara Health is an equal opportunity employer** and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.In support of our mission “to improve health every day,” this is a tobacco-free environment.**For positions that are available as remote work,** **Sentara Health employs associates in the following states:**Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.
#J-18808-Ljbffr