Senior Manager, Enterprise Third Party Risk Management

This role is accountable for leading the Enterprise Third-Party Risk Management (TPRM) capability. TPRM is a critical function needed to ensure management of financial, information security, legal, operational, regulatory/contractual, reputational and strategic risks. This role is accountable for ensuring GuideWell employs a responsive, targeted, enterprise-wide framework to evaluate, manage, mitigate and monitor third-party risk.

Key Responsibilities:

• TPRM Program Lead: Direct the development, implementation, and continuous improvement of the enterprise TPRM program, ensuring alignment with organizational goals and regulatory requirements.
• Governance and Oversight: Provide periodic reporting and analysis to the Audit, Risk and Compliance Committee of the Board of Directors, enabling effective oversight of the TPRM program; lead third-party risk operational governance committees and workgroups; support facilitation, administration, and reporting for the executive governance committee.
• Due Diligence: Lead and manage cross-organizational due diligence reviews for potential contracted third parties to determine the adequacy of financial, operational, and information security controls. Key responsibilities include evaluating the effectiveness of third-party controls, identifying and assessing potential risks and vulnerabilities, developing recommendations and presenting findings to senior business leaders, identifying and tracking risk mitigation strategies, and ensuring that all third-party relationships are thoroughly vetted and managed to minimize risk.
• Third-Party Reviews: Serve as the point of contact for all third-party reviews related to information technology / security, operational, artificial intelligence, business resiliency, regulatory and contractual compliance, facilitating successful completion of reviews through internal subject matter experts.
• Risk assessments: Perform annual risk assessments across financial, legal, information security, regulatory and contractual compliance, operational, reputational, and strategic risk domains, and conduct initial and annual inherent risk assessments of in-scope third parties.
• Compliance and Regulatory: Monitor, communicate, and ensure compliance with applicable laws, rules, regulations, professional standards, and industry best practices.
• Collaboration and Stakeholder Management: Develop ongoing integration with Procurement, Compliance, Legal, Information Technology, and operations management to identify and assess third-party risks and develop solutions that meet business needs and timeframes.
• Strategic Planning: Lead the development and management of the annual strategic TPRM work plan to achieve company and business unit objectives.
• Consult: Provide third-party risk management consulting and oversight for enterprise projects and GuideWell subsidiaries.
• Policy and Procedure Development: Develop, maintain and publish third-party risk management policies, procedures, training, presentations and resources.

What is required?

• 6+ years related work experience. Experience Details: Third-party risk management related experience that includes exposure to information security, system technology, Artificial Intelligence and operational process assessments
• 3+ years direct supervisory/management experience
• Related Bachelor's degree required
• Extensive knowledge of information security concepts, practices and tools.
• Broad knowledge of health care industry practices and applicable regulatory requirements.
• Proven ability to maintain confidentiality regarding sensitive information.
• Broad knowledge of the Third Party Management Life Cycle and associated procurement functions.
• Broad knowledge of the Three Lines of Defense Risk Management and Controls Assessment Model.
• Strong business-focused decision making and problem solving skills.
• Excellent interpersonal and leadership skills with a demonstrated ability to establish relationships with senior executives across all business units.

What is Preferred:

Additional certifications that may include: Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA) or Certified Third Party Risk Manager(CTPRM) Familiarity with a Governance, Risk and Compliance suite of tools, preferably RSA Archer Third-party Risk Management use case.

General Physical Demands

Sedentary work: Exerting up to 10 pounds of force occasionally to move objects. Jobs are sedentary if traversing activities are required only occasionally.

What We Offer:

As a Florida Blue employee, you will thrive in our Be Well, Work Well, GuideWell culture where being well as an individual, and working well as a team, are both important in serving our members and communities.

To support your wellbeing, comprehensive benefits are offered. As an employee, you will have access to:

• Medical, dental, vision, life and global travel health insurance;
• Income protection benefits: life insurance, short- and long-term disability programs;
• Leave programs to support personal circumstances;
• Retirement Savings Plan including employer match;
• Paid time off, volunteer time off, 10 holidays and 2 well-being days;
• Additional voluntary benefits available; and
• A comprehensive wellness program

Employee benefits are designed to align with federal and state employment laws. Benefits may vary based on the state in which work is performed. Benefits for intern, part-time and seasonal employees may differ.

To support your financial wellbeing, we offer competitive pay as well as opportunities for incentive or commission compensation. We also conduct regular annual reviews with pay for performance considerations for base pay increases.

Typical Annualized Hiring Range: $116,500 - $145,600

Annualized Salary Range: $116,500 - $189,300

Final pay will be determined with consideration of market competitiveness, internal equity, and the job-related knowledge, skills, training, and experience you bring.

We are an Equal Employment Opportunity employer committed to cultivating a work experience where everyone feels like they belong and can perform at their best in pursuit of our mission. All qualified applicants will receive consideration for employment.