TPCRM Risk Manager

About the role

Lead and manage Third-Party Cyber Risk Management (TPCRM) activities, including risk assessments, security controls, and audits for Genmab’s partners and suppliers. Develop, update, and implement TPCRM security standards, documentation, metrics, and requirements. Continuously identify, assess, and monitor third-party security risks using appropriate tools and techniques.

Responsibilities

• Support and enhance the TPCRM program, ensuring compliance with relevant regulations (e.g., Danish NIS2 Act) and internal policies.
• Collaborate with cross-functional teams such as Procurement, Legal, Corporate Compliance, Privacy, and Quality Assurance to align and deploy security requirements for vendors.
• Evaluate security assurance statements from critical suppliers and ensure all relevant suppliers are assessed or reassessed within set timelines.
• Design, execute, and manage cyber risk audits and assurance activities, integrating results into dashboards and reporting frameworks.
• Define, track, and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) related to IT risk management.
• Maintain strong working relationships with internal stakeholders (e.g., DD&AI, Legal, Global Procurement) to ensure effective risk management.
• Independently execute implementation of security controls, risk assessments, and risk management processes for assigned projects or business areas.
• Lead the setup and optimization of internal security management processes and participate in cross-functional project teams.
• Provide guidance to business teams and mentor new team members on security systems, processes, and best practices.
• Stay current on developments in security, privacy, and data protection regulations to ensure ongoing compliance and risk mitigation.