Senior TPRM Lead- Tooling and Process Engineering (Remote)

Overview

CrowdStrike is seeking an experienced Technical Lead, Third Party Risk Management (TPRM) to drive the strategy, architecture, and technical execution of the vendor risk ecosystem. This individual contributor role sits within the GRC organization and serves as the principal subject matter expert for TPRM processes and the platform of record.

What you'll do

• Serve as functional owner, technical architect, and principal subject matter expert for ServiceNow as the TPRM platform of record.
• Partner with IT to configure, optimize, and expand workflows, and architect and implement AI-driven capabilities to enhance risk scoring, continuous vendor monitoring, and system efficiency.
• Manage day-to-day operations of the TPRM assessment pipeline, including dynamic queue and capacity management, SLA tracking, and final reviews and approvals for vendor assessments.
• Lead the technical implementation of process improvements, including those identified through continuous improvement/Kaizen events, by developing and expanding ServiceNow automation to reduce manual effort.
• Architect and optimize the end-to-end vendor risk lifecycle (onboarding, inherent risk tiering, reassessment, offboarding).
• Own story creation, act as direct liaison with the development team, and provide oversight on sprint and epic development.
• Partner with Procurement, Legal, IT, and Security engineering teams to embed technical risk considerations and automated security checks into the vendor engagement pipeline.
• Oversee third-party control evaluations and audits, process implementation via relevant tooling, and support internal and external audit activities.
• Develop and maintain technical TPRM policies, standards, and procedures aligned with NIST, ISO 27001, SOC 2, and FAIR.
• Engineer and track automated KPIs, metrics, and dashboards to demonstrate program maturity and technical effectiveness to senior leadership.

What you'll need

• 10+ years of experience in Third Party Risk Management, GRC, information security risk, or related technical controls disciplines.
• Proven, hands-on administrative or architectural experience with the ServiceNow Third Party Risk Management (TPRM) module.
• 3+ years of experience acting as a technical lead, process architect, or principal SME driving operational efficiency and automation within a risk or compliance program.
• Strong, practical understanding of security and compliance frameworks, including NIST CSF, CSA CCM, ISO 27001, SOC 2, NIST 800-53, and/or SIG or CAIQ.
• Experience with or a strong background in evaluating and integrating AI/ML tools and emerging threat intelligence platforms into GRC workflows.
• Proven experience project-managing complex technical implementations, including scoping, work breakdown, critical path analysis, and quality assurance.
• Excellent stakeholder management skills, with the ability to translate highly technical risk concepts and system architectures for business audiences and senior leadership.
• Ability to operate and engineer solutions effectively in a fast-paced, high-growth, global technology environment.

Nice to have

• Experience operating within a cloud environment and familiarity with CrowdStrike products or services.
• Experience with continuous monitoring through integrating data with security operations teams.
• Practical experience in software development and secure coding best practices.
• Practical experience performing integration risk assessments and threat modeling for third-party software components.

Details

• Remote, USA.
• Base salary range for U.S. candidates is $125,000 - $180,000 per year, with eligibility for bonuses, equity grants, and a comprehensive benefits package.