Manager, Third Party Risk

As a global leader in digital infrastructure, QTS designs, builds and operates advanced data centers that support strategic AI, cloud and digital transformation initiatives. We are driven by a mission to connect the world for good and our people make it possible. Every single day, the creativity, dedication and genuine care for our communities are what push us forward and make this a truly special place to be. 

The Manager, Third-Party Risk Management (TPRM) leads the enterprise's third-party risk management program and team. This role is responsible for the governance, execution, and continuous improvement of processes used to identify, assess, monitor, and manage risks associated with suppliers, service providers, and technology vendors. The role partners closely with Procurement, Safety, Privacy, Legal, and business stakeholders to ensure third-party risks are appropriately managed while supporting business objectives.

• →Lead and develop the Third-Party Risk Management team, including workload planning, performance management, and employee development.
• →Manage the enterprise TPRM program, including vendor risk assessments, due diligence, issue management, continuous monitoring, and reporting.
• →Establish and maintain TPRM policies, standards, procedures, and risk methodologies.
• →Serve as an escalation point for high-risk vendors, significant findings, risk acceptances, and remediation activities, driving cross-functional alignment and ensuring risks are appropriately reviewed, communicated, and addressed.
• →Provide oversight of TPRM platforms and supporting technologies, including platform strategy, configuration, process optimization, reporting, automation, and overall program effectiveness.
• →Build strong partnerships with Procurement, Legal, Safety, Privacy, Business Continuity, and business owners throughout the vendor lifecycle.
• →Provide leadership and stewardship for Third-Party Risk Management governance forums and steering committees while partnering with stakeholders involved in technology review and approval processes.
• →Provide executive reporting and actionable insights regarding vendor risk exposure, emerging risks, program performance, and risk mitigation activities.
• →Drive continuous improvement initiatives that increase efficiency, scalability, and risk visibility across the enterprise.       Other duties as assigned.

• →Bachelor's degree or equivalent professional experience.
• →Five or more years of experience in Third-Party Risk Management, Vendor Risk Management, Information Security, Procurement, Risk Management, or related fields.
• →Three or more years of leadership experience.

• →Proven ability to lead risk-based governance programs and cross-functional initiatives.
• →Experience managing and optimizing third-party risk management technologies and related business processes.
• →Expertise in conducting and overseeing vendor risk assessments and remediation activities.

• Experience supporting large-scale technology, data centers, critical infrastructure, or cloud environments.
• Experience implementing and managing governance, risk, compliance, or third-party risk management platforms.
• Professional certifications such as CRISC, CISA, CISSP, CISM, CTPRP, or equivalent.

• Strong knowledge of third-party risk management principles, vendor governance, due diligence practices, and third-party risk lifecycle management.
• Ability to lead and influence cross-functional stakeholders without direct authority.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent verbal, written, and executive-level communication skills.
• Ability to translate complex risk issues into clear business impacts and recommendations.
• Demonstrated ability to build, mature, and optimize risk programs through effective processes, technology, and reporting.