Service Manager – Supplier Security Due Diligence & Monitoring Service

Key Responsibilities

• Lead the Supplier Security Due Diligence & Monitoring Service and oversee day-to-day service delivery.
• Manage and develop a team responsible for supplier security contracting support and risk-based decision making.
• Review and interpret supplier security assessment outcomes and monitoring results to guide contractual negotiations.
• Provide guidance on acceptable contractual security positions, fallback language, compensating controls, and alternative risk mitigation approaches.
• Ensure consistent application of enterprise security requirements across supplier agreements.
• Oversee documentation and tracking of contractual exceptions, deviations, and risk accommodations.
• Escalate contractual positions that exceed established risk tolerances through appropriate governance and risk acceptance processes.
• Partner closely with Legal, Procurement, Cybersecurity, Enterprise Risk Management, and business stakeholders to resolve complex supplier issues.
• Establish and maintain operational metrics, service-level objectives, reporting, and quality management practices.
• Lead continuous improvement efforts designed to improve scalability, consistency, and stakeholder experience.

Required Qualifications

• 7+ years of experience in information security, technology risk, third-party risk management, supplier risk management, governance, contracting, procurement, or related disciplines.
• 3+ years of leadership experience managing teams, services, programs, or operational functions.
• Experience evaluating cybersecurity and technology risks and applying sound risk-based decision-making principles.
• Strong understanding of supplier risk management, security controls, and governance practices.
• Experience working across legal, procurement, business, security, and risk management functions.
• Excellent written, verbal, stakeholder management, and executive communication skills.