[Hiring] Director, 3rd Party Security Risk @HealthEquity

Role Description

HealthEquity relies on a broad ecosystem of third party partners, vendors, platforms, and service providers to support member, client, and teammate experiences while protecting trust, resilience, and compliance. The Director of 3rd Party Risk is a strategic leadership role responsible for overseeing and evolving the 3rd party (third-party) risk management program into an enterprise-wide, AI-aware risk governance capability.

In this role, you will:

• Drive a pragmatic, measurable program that defines “what good looks like” across vendor tiers.
• Incorporate AI and agentic system risks into due diligence and lifecycle oversight.
• Align third party risk practices with enterprise strategy, regulatory expectations, resiliency objectives, and business priorities.
• Lead a growing team and collaborate cross-functionally with Security, Procurement, Legal, Privacy, Enterprise Risk, IT, Engineering, Finance, and business owners.
• Establish clear operating procedures, risk-tiered requirements, meaningful KRIs/KPIs, and board-ready reporting.
• Ensure third party relationships and AI-enabled vendor services align with the company’s risk appetite, strategic objectives, and obligation to protect member, client, and company data.

Qualifications

• Bachelor’s Degree in Computer Science or Engineering, or a related technical field.
• 12+ years of combined experience in information security.
• Prior supervisory experience.

Requirements

• Ability to integrate with the existing team and deliver on key objectives.
• Become an integral part of a high performing team and motivate others.
• Build constructive relationships with diverse groups of people, including internal and external stakeholders.
• Demonstrates excellent communication and listening skills.
• Drives results and champions change.
• Demonstrated ability to transform a third-party risk program from activity-based execution to measurable enterprise risk reduction.
• Knowledge of AI technologies, governance concepts, and third-party AI risks.
• Ability to align TPRM practices with enterprise risk management, AI governance, privacy, legal, procurement, SaaS security, business continuity, and technology governance processes.
• Experience in reviewing technical policies and developing standard operating procedures.
• Fosters teamwork and collaboration.
• High level of credibility, a technical background, particularly in security.
• Operates with a commitment to customer service excellence.
• Strong passion and motivation for security.

Benefits

• Medical, dental, and vision.
• HSA contribution and match.
• Dependent care FSA match.
• Uncapped paid time off.
• Paid parental leave.
• 401(k) match.
• Personal and healthcare financial literacy programs.
• Ongoing education & tuition assistance.
• Gym and fitness reimbursement.
• Wellness program incentives.

Salary Range

$151,500.00 To $200,500.00 / year