Third-Party Risk Management (TPRM) Program Manager

About the role

Support Bath & Body Works’ Ethics & Compliance Department and enhance the company’s enterprise-wide program for assessing, monitoring, and mitigating risks associated with vendors, suppliers, service providers, and other external partners. This role helps ensure that third-party relationships align with the company’s operational, security, compliance, and consumer experience standards in a retail and distribution environment where supply chain efficiency, data protection, and consumer trust are essential.

The TPRM Program Manager reports to the Director of Third-Party Compliance.

Responsibilities

• Partner with Procurement, Legal, Information Security, Compliance partners, ERM, and business units to embed risk controls throughout the vendor lifecycle.
• Support maintaining a centralized inventory of third-party relationships and ensure proper risk classification.
• Help facilitate end-to-end third-party risk assessments, including onboarding due diligence, periodic reviews, and offboarding evaluations.
• Assess vendor controls related to information security, data privacy, operational resilience, financial health, and regulatory compliance.
• Support the implementation of continuous monitoring processes for high-risk and critical vendors.
• Support regulatory exams, internal audits, and cross-functional compliance initiatives.
• Support third-party incident reporting, critical issue, and remediation processes.
• Support root-cause analysis for vendor-related operational or security issues as appropriate.
• Prepare timely documentation and communication of third-party risk issues affecting business operations.
• Provide subject matter expertise on third-party risk across the company.
• Provide training and guidance to business partners on risk assessment processes and vendor management standards.
• Build strong relationships with internal and external partners.

Qualifications

• Minimum 7+ years’ experience in vendor management, risk management, procurement, compliance, or cybersecurity.
• Strong understanding of third-party risk frameworks.
• Experience working with vendor management or GRC platforms.
• Ability to analyze complex issues, summarize risk findings, and communicate to executive audiences.
• Bachelor’s Degree in a related field or equivalent education.

Benefits

Benefits for eligible associates include:

• Robust medical, dental, vision, and pharmacy coverage, plus access to an onsite wellness center and pharmacy at the Columbus, OH home office.
• No-cost mental health and well-being support through the Employee Assistance Program (EAP).
• 401(k) with company match and Associate Stock Purchase Program with discount.
• Paid time off, paid parental leave, and access to family-building benefits.
• Home, auto, and pet insurance, plus a company-provided Care.com subscription.
• Tuition reimbursement and scholarship opportunities for post-secondary education.
• Complimentary products and a 40% merchandise discount.

Visit bbwbenefits.com for more details.