Technical Program Manager, Third Party Risk Management
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Include a section only when posting has real specific content. Remove boilerplate, navigation, legal, EEO, equal-opportunity, scam-warning, duplicated lines, application instructions. Also remove "Learn more at www.coreweave.com." maybe not needed. Also remove "CoreWeave is The Essential Cloud for AI™..." maybe that's about company description; could be part of "About the role"? Actually it's about company, not role. Could be considered "About the role"? Probably not. The posting includes "What You’ll Do" which is responsibilities. Then "In This Role, You Will Contribute to ..." also responsibilities. Then "Investing in our people..." maybe not needed. Then "Who You Are Minimum Qualifications" etc. Then "Additional Qualifications". Then "The base salary range..." => Pay. Then "In addition to base salary, our total rewards package includes..." => Benefits. Then "What We Offer" repeats benefits. Then list of benefits. Then "California Applicants..." etc is legal boilerplate, remove. Also "Export Control Compliance" maybe legal, remove.
We need to preserve substantive info: responsibilities list, qualifications (minimum and additional), pay range, benefits list.
We should not include sections with filler like "commensurate with experience". Not present.
We need to decide sections: About the role? Could include brief description of role from first paragraph: "The CISO organization at CoreWeave is responsible for executing and delivering security, trust, and assurance across our products, platforms, and operations. Within this organization, the Security Trust & Assurance team is building leading Governance, Risk and Compliance (GRC) programs, including third party risk management (TPRM). As a TPRM Technical Program Manager (TPM), you will work with cross-functional teams, including engineering, procurement, IT, and Legal to build leading TPRM programs across all phases of the vendor lifecycle. This is a hands-on and operational role that will directly contribute to CoreWeave’s security and privacy objectives." That's substantive. Could be "About the role". Use
About the role
then ...
.
Responsibilities: list from "In This Role, You Will Contribute to ..." bullet-like sentences. We'll extract each duty as list items.
Responsibilities list:
- Contribute to the TPRM strategy and roadmap, ensuring alignment with CoreWeave's overall security, privacy, and business objectives.
- Oversee & execute third party security risk assessments, including analysis of appropriate security controls, contract requirements, and compliance documentation.
- Track identified findings to closure, working with third parties and internal owners on remediation plans and timelines.
- Perform periodic reassessments of existing vendors according to tier-based review cadence.
- Maintain the vendor inventory and risk register in the TPRM platform.
- Help refine assessment questionnaires, workflows, and program documentation.
- Tailor communications to a diverse audience and remain adaptable to a wide range of personalities and technical depth.
We can put these in - .
Requirements? Could be "Minimum Qualifications" and "Additional Qualifications". Could combine into Requirements section? But we have headings: Requirements, Qualifications, Skills. The instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need to decide which to use. We have both minimum and additional qualifications; could put them under "Qualifications". Could also have "Requirements" for mandatory? But we can follow typical: Minimum Qualifications under "Requirements", Additional Qualifications under "Qualifications" maybe. Or we could have "Requirements" for mandatory, "Qualifications" for preferred. Let's do that.
Thus:
Requirements
with - for minimum qualifications items.
Minimum qualifications list:
- 2+ years of hands-on experience in Third Party Risk Management, including demonstrable experience building or maturing a TPRM program in a fast-paced, high-growth, or cloud-native environment.
- A Bachelor’s degree in Information Security, Computer Science, or a related field or equivalent job experience.
- Security certification such as CISA, CRISC, CISSP, or CTPRP.
- Working knowledge of common security control frameworks and standards and the ability to evaluate compliance documentation for control coverage and gaps.
- Experience conducting or supporting security risk assessments of third parties, including reviewing questionnaire responses, audit reports, and supporting evidence.
- Experience tracking risk findings and remediation items to closure across multiple stakeholders and competing timelines.
- Ability to maintain accurate records in a GRC or TPRM platform.
- Strong written and verbal communication skills, with the ability to adjust technical depth for audiences ranging from engineers to legal, procurement, and business owners.
- Demonstrated organization and attention to detail while managing a queue of concurrent assessments.
We'll list each as
- .
Then
Qualifications
for additional qualifications list:
- Experience working with CSPs/Hyperscalers.
- Exposure to TPRM process improvement work.
- Familiarity with security and privacy requirements commonly found in vendor contracts.
- Experience supporting audits or certifications and responding to customer security inquiries.
- Prior work building a program from the ground up rather than operating an established one.
Then Benefits: list from "What We Offer" bullet list.
Benefits list:
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance
- Voluntary supplemental life insurance
- Short and long-term disability insurance
- Flexible Spending Account
- Health Savings Account
- Tuition Reimbursement
- Ability to Participate in Employee Stock Purchase Program (ESPP)
- Mental Wellness Benefits through Spring Health
- Family-Forming support provided by Carrot
- Paid Parental Leave
- Flexible, full-service childcare support with Kinside
- 401(k) with a generous employer match
- Flexible PTO
- Catered lunch each day in our office and data center locations
- A casual work environment
- A work culture focused on innovative disruption
We'll put each as - under
Benefits
.
Pay: base salary range $157,000 to $210,000. Also mention starting salary determined based on job-related knowledge, skills, experience, and market location. Also mention discretionary bonus, equity awards, and comprehensive benefits program (already in benefits). Could include Pay section with stating base salary range and that starting salary depends on factors, plus discretionary bonus and equity awards. But we already have benefits covering discretionary bonus? Actually benefits said "In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility)." That's part of compensation. We could include that in Pay section. Let's do Pay:
The base salary range for this role is $157,000 to $210,000. Starting salary is determined based on job-related knowledge, skills, experience, and market location. Total rewards also include a discretionary bonus, equity awards, and a comprehensive benefits program.
Schedule: not mentioned. So we omit Schedule section.
We should also maybe include "About the role" section as earlier.
Check for any duplicated content: we have responsibilities already captured. Also there is "Investing in our people is one of our top priorities..." that's fluff; we can omit.
Now produce HTML fragment: no or . Just sections.
Let's craft:
About the role
The CISO organization at CoreWeave is responsible for executing and delivering security, trust, and assurance across our products, platforms, and operations. Within this organization, the Security Trust & Assurance team is building leading Governance, Risk and Compliance (GRC) programs, including third party risk management (TPRM). As a TPRM Technical Program Manager (TPM), you will work with cross-functional teams, including engineering, procurement, IT, and Legal to build leading TPRM programs across all phases of the vendor lifecycle. This is a hands-on and operational role that will directly contribute to CoreWeave’s security and privacy objectives.
Responsibilities
- Contribute to the TPRM strategy and roadmap, ensuring alignment with CoreWeave's overall security, privacy, and business objectives.
- Oversee & execute third party security risk assessments, including analysis of appropriate security controls, contract requirements, and compliance documentation.
- Track identified findings to closure, working with third parties and internal owners on remediation plans and timelines.
- Perform periodic reassessments of existing vendors according to tier-based review cadence.
- Maintain the vendor inventory and risk register in the TPRM platform.
- Help refine assessment questionnaires, workflows, and program documentation.
- Tailor communications to a diverse audience and remain adaptable to a wide range of personalities and technical depth.
Requirements
- 2+ years of hands-on experience in Third Party Risk Management, including demonstrable experience building or maturing a TPRM program in a fast-paced, high-growth, or cloud-native environment.
- A Bachelor’s degree in Information Security, Computer Science, or a related field or equivalent job experience.
- Security certification such as CISA, CRISC, CISSP, or CTPRP.
- Working knowledge of common security control frameworks and standards and the ability to evaluate compliance documentation for control coverage and gaps.
- Experience conducting or supporting security risk assessments of third parties, including reviewing questionnaire responses, audit reports, and supporting evidence.
- Experience tracking risk findings and remediation items to closure across multiple stakeholders and competing timelines.
- Ability to maintain accurate records in a GRC or TPRM platform.
- Strong written and verbal communication skills, with the ability to adjust technical depth for audiences ranging from engineers to legal, procurement, and business owners.
- Demonstrated organization and attention to detail while managing a queue of concurrent assessments.
Qualifications
- Experience working with CSPs/Hyperscalers.
- Exposure to TPRM process improvement work.
- Familiarity with security and privacy requirements commonly found in vendor contracts.
- Experience supporting audits or certifications and responding to customer security inquiries.
- Prior work building a program from the ground up rather than operating an established one.
Pay
The base salary range for this role is $157,000 to $210,000. Starting salary is determined based on job-related knowledge, skills, experience, and market location. Total rewards also include a discretionary bonus, equity awards, and a comprehensive benefits program.
Benefits
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance
- Voluntary supplemental life insurance
- Short and long-term disability insurance
- Flexible Spending Account
- Health Savings Account
- Tuition Reimbursement
- Ability to Participate in Employee Stock Purchase Program (ESPP)
- Mental Wellness Benefits through Spring Health
- Family-Forming support provided by Carrot
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Include a section only when posting has real specific content. Remove boilerplate, navigation, legal, EEO, equal-opportunity, scam-warning, duplicated lines, application instructions. Also remove "Learn more at www.coreweave.com." maybe not needed. Also remove "CoreWeave is The Essential Cloud for AI™..." maybe that's about company description; could be part of "About the role"? Actually it's about company, not role. Could be considered "About the role"? Probably not. The posting includes "What You’ll Do" which is responsibilities. Then "In This Role, You Will Contribute to ..." also responsibilities. Then "Investing in our people..." maybe not needed. Then "Who You Are Minimum Qualifications" etc. Then "Additional Qualifications". Then "The base salary range..." => Pay. Then "In addition to base salary, our total rewards package includes..." => Benefits. Then "What We Offer" repeats benefits. Then list of benefits. Then "California Applicants..." etc is legal boilerplate, remove. Also "Export Control Compliance" maybe legal, remove. We need to preserve substantive info: responsibilities list, qualifications (minimum and additional), pay range, benefits list. We should not include sections with filler like "commensurate with experience". Not present. We need to decide sections: About the role? Could include brief description of role from first paragraph: "The CISO organization at CoreWeave is responsible for executing and delivering security, trust, and assurance across our products, platforms, and operations. Within this organization, the Security Trust & Assurance team is building leading Governance, Risk and Compliance (GRC) programs, including third party risk management (TPRM). As a TPRM Technical Program Manager (TPM), you will work with cross-functional teams, including engineering, procurement, IT, and Legal to build leading TPRM programs across all phases of the vendor lifecycle. This is a hands-on and operational role that will directly contribute to CoreWeave’s security and privacy objectives." That's substantive. Could be "About the role". Use
About the role
then...
. Responsibilities: list from "In This Role, You Will Contribute to ..." bullet-like sentences. We'll extract each duty as list items. Responsibilities list: - Contribute to the TPRM strategy and roadmap, ensuring alignment with CoreWeave's overall security, privacy, and business objectives. - Oversee & execute third party security risk assessments, including analysis of appropriate security controls, contract requirements, and compliance documentation. - Track identified findings to closure, working with third parties and internal owners on remediation plans and timelines. - Perform periodic reassessments of existing vendors according to tier-based review cadence. - Maintain the vendor inventory and risk register in the TPRM platform. - Help refine assessment questionnaires, workflows, and program documentation. - Tailor communications to a diverse audience and remain adaptable to a wide range of personalities and technical depth. We can put these in- .
Requirements? Could be "Minimum Qualifications" and "Additional Qualifications". Could combine into Requirements section? But we have headings: Requirements, Qualifications, Skills. The instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need to decide which to use. We have both minimum and additional qualifications; could put them under "Qualifications". Could also have "Requirements" for mandatory? But we can follow typical: Minimum Qualifications under "Requirements", Additional Qualifications under "Qualifications" maybe. Or we could have "Requirements" for mandatory, "Qualifications" for preferred. Let's do that.
Thus:
Requirements
with- for minimum qualifications items. Minimum qualifications list: - 2+ years of hands-on experience in Third Party Risk Management, including demonstrable experience building or maturing a TPRM program in a fast-paced, high-growth, or cloud-native environment. - A Bachelor’s degree in Information Security, Computer Science, or a related field or equivalent job experience. - Security certification such as CISA, CRISC, CISSP, or CTPRP. - Working knowledge of common security control frameworks and standards and the ability to evaluate compliance documentation for control coverage and gaps. - Experience conducting or supporting security risk assessments of third parties, including reviewing questionnaire responses, audit reports, and supporting evidence. - Experience tracking risk findings and remediation items to closure across multiple stakeholders and competing timelines. - Ability to maintain accurate records in a GRC or TPRM platform. - Strong written and verbal communication skills, with the ability to adjust technical depth for audiences ranging from engineers to legal, procurement, and business owners. - Demonstrated organization and attention to detail while managing a queue of concurrent assessments. We'll list each as
- .
Then
Qualifications
for additional qualifications list: - Experience working with CSPs/Hyperscalers. - Exposure to TPRM process improvement work. - Familiarity with security and privacy requirements commonly found in vendor contracts. - Experience supporting audits or certifications and responding to customer security inquiries. - Prior work building a program from the ground up rather than operating an established one. Then Benefits: list from "What We Offer" bullet list. Benefits list: - Medical, dental, and vision insurance - 100% paid for by CoreWeave - Company-paid Life Insurance - Voluntary supplemental life insurance - Short and long-term disability insurance - Flexible Spending Account - Health Savings Account - Tuition Reimbursement - Ability to Participate in Employee Stock Purchase Program (ESPP) - Mental Wellness Benefits through Spring Health - Family-Forming support provided by Carrot - Paid Parental Leave - Flexible, full-service childcare support with Kinside - 401(k) with a generous employer match - Flexible PTO - Catered lunch each day in our office and data center locations - A casual work environment - A work culture focused on innovative disruption We'll put each as - under
Benefits
. Pay: base salary range $157,000 to $210,000. Also mention starting salary determined based on job-related knowledge, skills, experience, and market location. Also mention discretionary bonus, equity awards, and comprehensive benefits program (already in benefits). Could include Pay section withstating base salary range and that starting salary depends on factors, plus discretionary bonus and equity awards. But we already have benefits covering discretionary bonus? Actually benefits said "In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility)." That's part of compensation. We could include that in Pay section. Let's do Pay:
The base salary range for this role is $157,000 to $210,000. Starting salary is determined based on job-related knowledge, skills, experience, and market location. Total rewards also include a discretionary bonus, equity awards, and a comprehensive benefits program.
Schedule: not mentioned. So we omit Schedule section. We should also maybe include "About the role" section as earlier. Check for any duplicated content: we have responsibilities already captured. Also there is "Investing in our people is one of our top priorities..." that's fluff; we can omit. Now produce HTML fragment: no or . Just sections. Let's craft:About the role
The CISO organization at CoreWeave is responsible for executing and delivering security, trust, and assurance across our products, platforms, and operations. Within this organization, the Security Trust & Assurance team is building leading Governance, Risk and Compliance (GRC) programs, including third party risk management (TPRM). As a TPRM Technical Program Manager (TPM), you will work with cross-functional teams, including engineering, procurement, IT, and Legal to build leading TPRM programs across all phases of the vendor lifecycle. This is a hands-on and operational role that will directly contribute to CoreWeave’s security and privacy objectives.
Responsibilities
- Contribute to the TPRM strategy and roadmap, ensuring alignment with CoreWeave's overall security, privacy, and business objectives.
- Oversee & execute third party security risk assessments, including analysis of appropriate security controls, contract requirements, and compliance documentation.
- Track identified findings to closure, working with third parties and internal owners on remediation plans and timelines.
- Perform periodic reassessments of existing vendors according to tier-based review cadence.
- Maintain the vendor inventory and risk register in the TPRM platform.
- Help refine assessment questionnaires, workflows, and program documentation.
- Tailor communications to a diverse audience and remain adaptable to a wide range of personalities and technical depth.
Requirements
- 2+ years of hands-on experience in Third Party Risk Management, including demonstrable experience building or maturing a TPRM program in a fast-paced, high-growth, or cloud-native environment.
- A Bachelor’s degree in Information Security, Computer Science, or a related field or equivalent job experience.
- Security certification such as CISA, CRISC, CISSP, or CTPRP.
- Working knowledge of common security control frameworks and standards and the ability to evaluate compliance documentation for control coverage and gaps.
- Experience conducting or supporting security risk assessments of third parties, including reviewing questionnaire responses, audit reports, and supporting evidence.
- Experience tracking risk findings and remediation items to closure across multiple stakeholders and competing timelines.
- Ability to maintain accurate records in a GRC or TPRM platform.
- Strong written and verbal communication skills, with the ability to adjust technical depth for audiences ranging from engineers to legal, procurement, and business owners.
- Demonstrated organization and attention to detail while managing a queue of concurrent assessments.
Qualifications
- Experience working with CSPs/Hyperscalers.
- Exposure to TPRM process improvement work.
- Familiarity with security and privacy requirements commonly found in vendor contracts.
- Experience supporting audits or certifications and responding to customer security inquiries.
- Prior work building a program from the ground up rather than operating an established one.
Pay
The base salary range for this role is $157,000 to $210,000. Starting salary is determined based on job-related knowledge, skills, experience, and market location. Total rewards also include a discretionary bonus, equity awards, and a comprehensive benefits program.
Benefits
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance
- Voluntary supplemental life insurance
- Short and long-term disability insurance
- Flexible Spending Account
- Health Savings Account
- Tuition Reimbursement
- Ability to Participate in Employee Stock Purchase Program (ESPP)
- Mental Wellness Benefits through Spring Health
- Family-Forming support provided by Carrot