Senior Vendor & Contract Manager || 1099/W2 Role
VLS Systems Inc · Trenton, New Jersey, United States
FULL TIMEpermanent
Job Description
Position: Senior Vendor & Contract ManagerLocation: Trenton, NJ- HybridDescription:Complete Description:We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management across our technology ecosystem.
Want to make an application Make sure your CV is up to date, then read the following job specs carefully before applying.
Key Responsibilities:• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.
Qualifications:•8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience within large-scale enterprise environments.•Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.•Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.•Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.
Skill Required / Desired Amount of ExperienceIT Compliance, ITGC & Audit Governance in Enterprise Environments- Required 8 YearsAuthoring & Updating Enterprise IT Security, Governance & Regulatory Policies- Required 7 YearsAudit Finding Remediation, Technical Root-Cause Analysis & Action Plans- Required 7 YearsAlignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks- Required 7 YearsThird-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification- Highly desired 7 YearsEvaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations- Highly desired 7 YearsBachelor’s Degree minimum- Required
Question 1Where is the candidate currently geographically located?
Question 2If the candidate resides more than 1 hour from the client site, will the candidate relocate for the position? xzbcwsv
Question 3Please provide link to LinkedIn profile.
Want to make an application Make sure your CV is up to date, then read the following job specs carefully before applying.
Key Responsibilities:• Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.• Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.• Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.• Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.• Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.• Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.• Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.
Qualifications:•8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience within large-scale enterprise environments.•Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.•Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.•Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.
Skill Required / Desired Amount of ExperienceIT Compliance, ITGC & Audit Governance in Enterprise Environments- Required 8 YearsAuthoring & Updating Enterprise IT Security, Governance & Regulatory Policies- Required 7 YearsAudit Finding Remediation, Technical Root-Cause Analysis & Action Plans- Required 7 YearsAlignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks- Required 7 YearsThird-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification- Highly desired 7 YearsEvaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations- Highly desired 7 YearsBachelor’s Degree minimum- Required
Question 1Where is the candidate currently geographically located?
Question 2If the candidate resides more than 1 hour from the client site, will the candidate relocate for the position? xzbcwsv
Question 3Please provide link to LinkedIn profile.
Details
| Company | VLS Systems Inc |
| Location | Trenton, New Jersey, United States |
| Type | FULL TIME |
| Niche | tech |
| Experience | permanent |