This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
This role ensures third-party engagements align with the organization's risk appetite, security ... cyber risk management in large, complex enterprises. 5+ years of leadership (direct managerial ...
Vice President, Third Party Risk Management
Dallas, TX · On-site
$130 - $182.50/hr
Proven experience leading high-performing Third-Party Risk Assessment teams, including coaching, prioritization, workload management, and quality oversightBachelor's degree in: Business ...
Vice President, Third Party Risk Management
Dallas, TX · On-site
$130 - $182.50/hr
Proven experience leading high-performing Third-Party Risk Assessment teams, including coaching, prioritization, workload management, and quality oversightBachelor's degree in: Business ...
Senior Third-Party Cyber Security Risk Analyst
$95K - $123K/yr
This role evaluates each third-party relationship to assess the associated risk profile and the effectiveness of the risk management capabilities in place, ensuring alignment with Toyota's risk ...
Senior Third-Party Cyber Security Risk Analyst
$95K - $123K/yr
This role evaluates each third-party relationship to assess the associated risk profile and the effectiveness of the risk management capabilities in place, ensuring alignment with Toyota's risk ...
Product Mgr, Third-Party Risk Management
Austin, TX · On-site +1
$108K - $148K/yr
... third-party risk management processes. This role serves as the bridge between Procurement, Risk ... Direct Help Line at 877-612-7547, option 1, and following the prompts to speak to an HR Advisor.
Product Mgr, Third-Party Risk Management
Austin, TX · On-site +1
$108K - $148K/yr
... third-party risk management processes. This role serves as the bridge between Procurement, Risk ... Direct Help Line at 877-612-7547, option 1, and following the prompts to speak to an HR Advisor.
Senior Third-Party Cyber Security Risk Analyst
Plano, TX · On-site
$95K - $123K/yr
This role evaluates each third-party relationship to assess the associated risk profile and the effectiveness of the risk management capabilities in place, ensuring alignment with Toyota's risk ...
Senior Third-Party Cyber Security Risk Analyst
Plano, TX · On-site
$95K - $123K/yr
This role evaluates each third-party relationship to assess the associated risk profile and the effectiveness of the risk management capabilities in place, ensuring alignment with Toyota's risk ...
Vendor Risk Manager
Westlake, TX · On-site
$36.78 - $40.87/hr
Execute a robust third-party risk management framework, conducting risk assessment and oversight activities to effectively assess, monitor, and mitigate vendor risks. * Consistently apply established ...
Vendor Risk Manager
Westlake, TX · On-site
$36.78 - $40.87/hr
Execute a robust third-party risk management framework, conducting risk assessment and oversight activities to effectively assess, monitor, and mitigate vendor risks. * Consistently apply established ...
Product Mgr, Third-Party Risk Management
Austin, TX · On-site
$108K - $148K/yr
... third-party risk management processes. This role serves as the bridge between Procurement, Risk ... Direct Help Line at 877-612-7547, option 1, and following the prompts to speak to an HR Advisor.
Product Mgr, Third-Party Risk Management
Austin, TX · On-site
$108K - $148K/yr
... third-party risk management processes. This role serves as the bridge between Procurement, Risk ... Direct Help Line at 877-612-7547, option 1, and following the prompts to speak to an HR Advisor.
Director GRC
Addison, TX · On-site
Director, Governance, Risk & Compliance (GRC) Location: Addison, TX (Hybrid - 2-4 days onsite, 4 ... Oversee Third-Party Risk Management (TPRM), including vendor risk assessments and ongoing ...
Director GRC
Addison, TX · On-site
Director, Governance, Risk & Compliance (GRC) Location: Addison, TX (Hybrid - 2-4 days onsite, 4 ... Oversee Third-Party Risk Management (TPRM), including vendor risk assessments and ongoing ...
Director GRC
Addison, TX · On-site
Director, Governance, Risk & Compliance (GRC) Location: Addison, TX (Hybrid - 2-4 days onsite, 4 ... Oversee Third-Party Risk Management (TPRM), including vendor risk assessments and ongoing ...
Director GRC
Addison, TX · On-site
Director, Governance, Risk & Compliance (GRC) Location: Addison, TX (Hybrid - 2-4 days onsite, 4 ... Oversee Third-Party Risk Management (TPRM), including vendor risk assessments and ongoing ...
Adaptable, self-directed problem solver who can manage shifting priorities, multiple workstreams ... The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to ...
Adaptable, self-directed problem solver who can manage shifting priorities, multiple workstreams ... The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to ...
Director Third Party Risk Management information
See Texas salary details
$50.3K - $67.8K
6% of jobs
$67.8K - $85.2K
6% of jobs
$97.7K is the 25th percentile. Wages below this are outliers.
$85.2K - $102.7K
17% of jobs
$102.7K - $120.1K
16% of jobs
The median wage is $123.3K / yr.
$120.1K - $137.5K
23% of jobs
$147.1K is the 75th percentile. Wages above this are outliers.
$137.5K - $155K
11% of jobs
$155K - $172.4K
6% of jobs
$172.4K - $189.9K
4% of jobs
$189.9K - $207.3K
4% of jobs
$207.3K - $224.8K
2% of jobs
$224.8K - $242.2K
3% of jobs
$50.3K
$133.4K
$242.2K
How much do director third party risk management jobs pay per year?
What are some of the key challenges a director of third party risk management faces when implementing risk assessment frameworks across a large organization?
What does a director of third party risk management do?
What is the difference between Director Third Party Risk Management vs Vendor Risk Manager?
| Aspect | Director Third Party Risk Management | Vendor Risk Manager |
|---|---|---|
| Credentials | Typically requires advanced degrees and certifications like CTPRP or CRISC | Often requires certifications such as CTPRP, CRISC, or vendor-specific training |
| Work Environment | Strategic leadership, overseeing multiple teams and enterprise-wide risk policies | Operational focus, managing vendor assessments and risk mitigation activities |
| Industry Usage | Used in large organizations across finance, healthcare, and technology sectors | Common in organizations with extensive vendor networks, especially in finance and IT |
The main difference is that the Director Third Party Risk Management holds a strategic, leadership role overseeing enterprise-wide third-party risks, while the Vendor Risk Manager focuses on operational vendor assessments and risk mitigation. Both roles require similar certifications but differ in scope and level of responsibility.
What are the key skills and qualifications needed to thrive as a director of third party risk management, and why are they important?

Full-time
Medical, Dental, Vision, Retirement, PTO
Posted 17 days ago
Wolters Kluwer rating
9.0
Based on 28 frontline employees who took The Breakroom Quiz
33rd of 242 rated software companies
Job description
ThirdParty IT Risk Manager is responsible for leading and modernizing Wolters Kluwer's global thirdparty cyber risk management capability across a highly distributed, marketdriven technology and supplier landscape. This role ensures third-party engagements align with the organization's risk appetite, security standards, and regulatory expectations and lead the execution of a scalable, intelligenceled TPRM program that delivers meaningful and defensible assurance over thirdparty cyber risk-moving beyond traditional, questionnairecentric models.
The role partners closely with Global Supply Chain, Procurement, Legal, and Privacy teams to reduce fragmentation across markets by translating diverse, marketspecific approaches into standardized enterprise agreements, security configurations, and control expectations. A core focus of this position is innovation: designing and implementing differentiated thirdparty assurance approaches that leverage automation, technical validation, and continuous monitoring to provide realtime insight into supplier risk rather than relying solely on static assessments.
Responsibilities:
Program Leadership & Modernization
Lead and evolve Wolters Kluwer's global Third Party Risk Management (TPRM) program and operating model, ensuring it is scalable, risk based, and aligned with enterprise cyber risk governance.
Modernize TPITRM by shifting from a primarily questionnaire driven approach to a data driven program that incorporates technical validation, continuous monitoring, AI, and risk quantification.
Lead, whether functionally or formally - junior team members as a manager level leader across the TPRM function to drive successful outcomes across the entire TPRM unit.
Continuous Monitoring, Automation & Innovation
Implement continuous monitoring capabilities to deliver near real time visibility into third party cyber posture, control performance, and emerging risk indicators.
Design and deploy innovative approaches-including automation and AI assisted techniques-for evidence collection, risk scoring, and exception management.
Continuously assess emerging tools, data sources, and assurance models to improve risk coverage, reduce assessment friction, and enhance signal quality beyond traditional questionnaires.
Contract Review:
Strong skills in the development, review, and analysis of third party contracts to ensure Company requirements, principles, and assets are sufficiently protected in accordance with internal expectations.
Strong business acumen and ability to identify technical and functional requirements that do not align or meet Company needs, suggest enhancements, and have them accepted and implemented by the supplier.
Governance, Reporting & Escalation
Maintain a centralized, enterprise wide inventory of third party relationships, risk tiers, and risk treatment decisions.
Provide clear, concise reporting on third party cyber risk posture, trends, and concentration risk to senior leadership.
Leadership & Collaboration
Build, lead, and develop a high performing team of third party risk professionals and technical reviewers.
Foster a culture of accountability, innovation, and constructive challenge consistent with Wolters Kluwer values and operating principles.
Job Qualifications
Bachelors degree in computer science, information security, management information systems or similar.
12+ years of experience in cybersecurity, technology risk, or information security, including significant ownership of third party or supplier cyber risk management in large, complex enterprises.
5+ years of leadership (direct managerial experience or functional delivery leading teams).
Proven experience designing and leading a global TPRM program across the full third party risk lifecycle.
Demonstrated success modernizing TPRM by implementing risk based approaches that integrate technical validation, automation, and continuous monitoring.
Demonstrated success owning decisions and outcomes at a senior level independently without formal authority.
Strong technical fluency across cloud platforms, APIs, identity, data flows, and integration architectures, with the ability to partner credibly with security architects and technical SMEs.
Experience overseeing advanced technical assessments for high risk or critical third parties, such as architecture reviews, vulnerability assessments, penetration testing, and threat modeling.
Ability to operate effectively in highly distributed, market driven environments.
Demonstrated leadership experience, including building high performing teams and influencing senior stakeholders across Technology, Procurement, Legal, Privacy, and Enterprise Risk Management.
Strong executive communication skills, with experience reporting third party cyber risk posture and trends to senior leadership.
Preferred qualification
Familiarity with systemic, concentration, and fourthparty risk.
Working knowledge of NIST CSF, ISO 27001, GDPR, and CCPA.
Relevant certifications (e.g., CISSP, CISM, CTPRP, CRISC, CISA)
#LI-Hybrid
To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we're getting to know you-not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process. Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process.
Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.
Compensation:
$118,300.00 - $207,400.00 USDThis role is eligible for Bonus.Compensation range listed is based on primary location of the position. Actual base salary offer is influenced by a wide array of factors including but not limited to skills, experience and actual hiring location. Your recruiter can share more information about the specific offer for the job location during the hiring process.
Additional Information:Wolters Kluwer offers a wide variety of competitive benefits and programs to help meet your needs and balance your work and personal life, including but not limited to: Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave. Full details of our benefits are available upon request.
What Wolters Kluwer employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom