Third-Party Risk Management Manager

Veracyte is seeking a Third-Party Risk Management Manager to lead their program for identifying, mitigating, and monitoring risks associated with security, AI systems, and data privacy. This role involves collaborating with IT, Legal, and other departments to assess risks, drive remediation, and maintain compliance. The ideal candidate will be a detail-oriented expert in IT and security risks.

Requirements

• Bachelor’s degree in Information Security, Business Administration, Risk Management, or related field
• 8+ years of experience in Third Party Vendor Risk Management, IT, AI and Cybersecurity risks
• Familiarity with risk and compliance frameworks (NIST, SOC 2, ISO 27001, HIPAA, HITRUST)
• Experience with TPRM or GRC platforms (e.g., Archer, OneTrust, ServiceNow GRC, ProcessUnity)
• Strong analytical and communication skills
• Experience presenting risk findings to executives or audit committees

Benefits

• Competitive compensation
• Bonus/incentives
• Restricted stock units