About Collabera:
Established in 1991, Collabera is one of the fastest growing end-to-end information technology services and solutions companies globally. As a half a billion dollar IT company, Collabera's client-centric business model, commitment to service excellence and Global Delivery Model enables its global 2000 and leading mid-market clients to deliver successfully in an increasingly competitive marketplace.
With over 8200 IT professionals globally, Collabera provides value-added onsite, offsite and offshore technology services and solutions to premier corporations. Over the past few years, Collabera has been awarded numerous accolades and Industry recognitions including.
• Collabera awarded Best Staffing Company to work for in 2012 by SIA. (hyperlink here)
• Collabera listed in GS 100 - recognized for excellence and maturity
• Collabera named among the Top 500 Diversity Owned Businesses
• Collabera listed in GS 100 & ranked among top 10 service providers
• Collabera was ranked:
• 32 in the Top 100 Large Businesses in the U.S
• 18 in Top 500 Diversity Owned Businesses in the U.S
• 3 in the Top 100 Diversity Owned Businesses in New Jersey
• 3 in the Top 100 Privately-held Businesses in New Jersey
• 66th on FinTech 100
• 35th among top private companies in New Jersey
http://www.collabera.com/about_us/accolades.jsp
Collabera recognizes true potential of human capital and provides people the right opportunities for growth and professional excellence. Collabera offers a full range of benefits to its employees including paid vacations, holidays, personal days, Medical, Dental and Vision insurance, 401K retirement savings plan, Life Insurance, Disability Insurance.
The IS Third Party Governance Lead effort is within company Information Security organization and will be responsible for the execution of companies third party governance and risk management program. The successful candidate will be responsible for building the program based on existing framework, managing and maintaining the program which will support company business efforts that pursue compliant third party solutions and services that will minimize risk at the direction of the company Information Security Risk Manager . The candidate must have strong skills in project management in conducting operational, process, and technical reviews, as well as awareness on privacy requirement for the US and Canada in order to perform privacy assessments. The candidate must also have the ability to communicate well, and be able to work in cross functional teams to coordinate risk, compliance, and regulatory management. This role requires someone to be highly tactical in their efforts.
This position will provide overall project management and support to the IS, Legal, and Procurement and will assist with the development, implementation and on-going support of the corporate third party governance and risk framework, providing structured processes, tools, and assistance to business areas to capture, identify, evaluate, respond to, and report on vendor risk issues. Provide leadership to integrate security technology, operations and risk management. The Lead will additionally create and maintain an enterprise vendor pre-approval list and risk "heat map."
Specifically, the Third Party Governance Lead will be expected to:
• Maintains knowledge currency of security and related risk based areas and methods
• Creates and executes risk and privacy review/consulting assessments
• Assists in the development of team metrics, analyzes data, and takes appropriate action
• Develop a global vendor threat, risk, vulnerability and risk remediation assurance and management program to identify, track, and remediate vendor security risks and vulnerabilities across the enterprise
• Partners and collaborates with business and technology groups to deliver value through security review, assessment and consulting services
• Interfaces with IS technology and Procurement, Legal, business areas
• Reviews any exceptions to contract terms to determine a recommendation on acceptance or rejection
QualificationsDesired Qualifications
• Certifications such as PMP, CISSP, CIPP, CRISC, CISM, CRCMP, CISA with 5-8 years of applicable experience in the Risk, Compliance or Audit field. The candidates should more than likely have at least 2 of the listed certifications.
• Bachelor degree or equivalent work experience
• Five to Six years of IS security experience including technology-related auditing, consulting, and privacy.
• Subject matter expert level knowledge of both the business and technical aspects of security, including third party security risks (all types of vendors).
• Strong broad-based technical background
• High level of business acumen, preferably in CPG industry
• Experience in a governance organization
• Strong risk-based analysis and decision making skills
• Ability to understand and analyze complex business processes and technologies to make sound recommendations
• Project management experience
• Ability to multitask and manage competing priorities
• Process management, time management and organizational skills
• Excellent interpersonal, customer service and relationship management skills
• Excellent facilitation, negotiation and conflict management skills
• Proven ability to effectively handle challenging clients and difficult political situations
• Excellent written and verbal communication skills
• Ability to create and implement new processes and procedures
• Proficient use of personal computers and MS Office Suite
• Ability to travel up to 10% (may need a passport)
Additional InformationAll your information will be kept confidential according to EEO guidelines.
Top Skills
Similar Jobs
What you need to know about the Chicago Tech Scene
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory



