Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.
Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.
We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.
When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.
We are seeking a Third Party Risk Manager to join our team. This is a Remote opportunity based out of the United States.
Job Summary
The Third-Party Risk Manager is primarily responsible for leading and maturing Imprivata's third-party risk management program, with a focus on cybersecurity, data privacy, and AI governance across Imprivata's business units. Reporting to the Director, Privacy & Compliance Counsel, and working as a peer alongside the Privacy & Vendor Contracts Manager, this role co-owns the full TPRM program lifecycle, including continuous monitoring, Nth-party risk visibility, and software supply chain security. The position will work alongside the commercial legal, privacy, security, and procurement teams to support vendor risk assessment, data protection, and AI governance initiatives. The position requires a driven, self-directed professional who brings strong critical thinking, clear communication, and initiative to complex risk decisions, and who can provide high-quality work product with minimal supervision in a fast-paced, high-energy environment.
Duties and Responsibilities
- Lead Imprivata’s third-party risk program across cybersecurity, privacy, and AI governance. Independently prioritize work, recommend mitigations, and escalate material risks for acceptance.
- Conduct security, privacy, and AI risk assessments of vendors and service providers, reviewing certifications, audit reports, questionnaires, penetration tests, data flows, software bills of materials, and AI disclosures.
- Evaluate vendor data collection, retention, sharing, and transfers against applicable privacy requirements, and assess inherent and residual risk.
- Use security ratings and continuous monitoring tools to identify changes in vendor risk and emerging issues.
- Manage the vendor risk lifecycle, including onboarding, periodic reviews, offboarding, inventory, risk classification, and confirmation of data return or destruction.
- Map Nth-party dependencies and concentration risks; review security, privacy, and AI contract terms, including data protection, subprocessor, breach notice, and business associate requirements.
- Track remediation through closure, maintain clear records, and build constructive relationships with vendors and internal partners to resolve issues promptly.
- Partner with Legal, Privacy, Security, Procurement, AI Governance, and business owners to communicate findings, maintain metrics and reports, improve workflows, and train stakeholders.
- Assess vendor AI practices, including data use, model training and provenance, and third-party integrations. Apply recognized AI risk frameworks and support governance policies and assessment playbooks.
- Maintain evidence and support audits, regulatory inquiries, and governance reporting. Monitor relevant security, privacy, and AI standards and laws, including ISO, NIST, HIPAA, GDPR, DORA, NIS2, and applicable regional requirements.
- Perform other duties as assigned and required.
Qualifications
- 5–7 years of experience in third-party/vendor risk, information security, IT audit, compliance, or governance, including SaaS risk assessments and cross-functional work. Bachelor’s degree in a related field required; healthcare or regulated-industry experience preferred. JD or equivalent legal education is a plus. CTPRP, CRISC, CISA, CISM, CISSP, or AIGP certification preferred.
- Strong written and verbal communication, sound judgment, and a collaborative, practical approach. Able to prioritize work, meet deadlines, advise executives, and adapt in a changing environment.
- Experience building or improving risk programs, assessments, playbooks, and scalable processes. Able to analyze contractual, privacy, security, and AI issues and provide concise, business-focused guidance; familiarity with procurement and vendor pricing is helpful.
- Proficiency with Microsoft 365 and relevant business systems, TPRM/GRC platforms, security-rating tools, and contract lifecycle management systems. Experience with AI-assisted contract review tools is beneficial.
- Working knowledge of security, privacy, and AI frameworks and regulations, such as NIST CSF, NIST AI RMF, NIST 800-53, ISO 27001/27701/42001, HIPAA, GDPR, DORA, NIS2, the EU AI Act, and U.S. state privacy laws. Familiarity with SIG, CAIQ, or similar assessment tools.
This position offers a total compensation range of $124,000.00 to $156,000.00 (inclusive of base salary and variable compensation, such as bonuses and incentives). In addition, more information about Imprivata’s benefit offerings can be found here. This range represents the high and low end of Imprivata’s compensation range for this position. Actual compensation will vary and may be above or below the range based on various factors, such as a candidate’s location, skills, experience, and qualifications.
At Imprivata, we have a top-notch work environment, developmental opportunities, a competitive total rewards package, and the desire to have fun. If you have the skills and qualifications as we have described above, we want to hear from you!
Imprivata provides equal employment opportunities, regardless of race, religion, age, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
#LI-Remote #LI-SF1
Similar Jobs at Imprivata
Healthtech • Information Technology • Security • Software • Cybersecurity
Implements enterprise software solutions for customers and partners, from technical assessment and planning through deployment, testing, training, and project completion. The role installs and integrates Imprivata products with healthcare, identity, virtualization, database, and mobile device management technologies. Responsibilities include troubleshooting Windows environments, coordinating project activities, maintaining implementation methodologies, developing technical documentation, conducting workshops, and delivering advanced customer and partner training. Extensive domestic travel of approximately 75% is required.
Top Skills:
AuthenticationAutoitCernerCitrixCitrix Endpoint ManagementDirectory ServicesEncryptionEpicFirewallsGroundcontrolHyper-VIdentity ManagementImprivata Confirm IdImprivata OnesignImprivata PamIvanti Endpoint Manager MobileJavaScriptLan/WanMckessonMdmMeditechMicrosoft IntuneMs SqlMySQLNutanixOraclePkiPmpPostgresProvisioningRoutersSalesforceSQLSsisSwitchesVbscriptVdiVMwareWeb SsoWorkspace One Uem
Healthtech • Information Technology • Security • Software • Cybersecurity
Manages commercial sales across the Western United States, targeting medium and large accounts in non-healthcare industries. Responsibilities include exceeding quota, developing account strategies, engaging executive decision-makers, managing demonstrations and evaluations, partnering with resellers and internal sales teams, maintaining Salesforce and Clari forecasts, and expanding existing customer relationships. Requires extensive enterprise sales experience, Identity and Access Management expertise, executive-level selling, negotiation, presentation, and autonomous territory management.
Top Skills:
ClariIdentity And Access ManagementSalesforce
Healthtech • Information Technology • Security • Software • Cybersecurity
Leads complex enterprise IT solution deployments for healthcare clients, managing project plans, budgets, schedules, staffing, risks, vendors, and client relationships. Coordinates internal and external teams, tracks project progress and deliverables, communicates with leadership, supports SOW and budget estimation, resolves issues, and contributes to professional services project management methodologies.
Top Skills:
FinancialforceExcelMicrosoft ProjectOpenairSalesforce
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
