[Hiring] Senior Manager Third Party Risk @Baylor Genetics

Role Description

Baylor Genetics is seeking a Manager, Third Party Risk to build, lead, and mature our enterprise Third-Party Risk Management (TPRM) program. This role ensures compliance with HIPAA, GDPR, CLIA, CAPA, and other applicable regulatory requirements for vendors handling sensitive data.

• Owns the full vendor lifecycle intake, risk tiering, security and privacy assessment, onboarding, ongoing monitoring, and offboarding for both upstream and downstream vendors.
• Leads Baylor Genetics’ recurring User Access Review (UAR) program and drives audit readiness across ISO 27001, ISO 27701, ISO 42001, and HITRUST.

Qualifications

• Required: Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field or an equivalent combination of education and experience.
• Minimum of 6–8 years of experience in information security, risk, or compliance.
• Hands-on audit experience with ISO 27001, ISO 27701, and ISO 42001.
• Demonstrated HITRUST experience (assessment, readiness, and/or certification support).
• Experience developing and managing recurring User Access Review (UAR) programs and least-privilege access controls.
• Working knowledge of vendor risk assessment methodologies (e.g., SIG) and risk scoring/tiering.
• Strong understanding of HIPAA, GDPR, and security requirements for PHI and sensitive PII.
• Preferred: Relevant certifications such as CTPRP, CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor/Implementer.
• Experience with GRC platforms (e.g., TrustArc) and vendor risk tooling.
• Prior experience in a healthcare, clinical laboratory, or other regulated (HIPAA/PHI) environment.
• People- or program-management experience leading assessments and coordinating cross-functional stakeholders.

Requirements

• Lead and continuously mature the enterprise Third-Party Risk Management program.
• Own vendor intake and reassessment, inherent-risk scoring, risk-tier assignment, and lead security and cybersecurity reviews for medium- and high-risk vendors.
• Establish a standardized vendor onboarding, continuous monitoring, and reassessment process.
• Conduct internal and external vendor audits including “high-risk” upstream vendors.
• Operate ongoing monitoring and collaborate with cross departmental stakeholders.
• Develop and manage the recurring User Access Review program across in-scope applications.
• Enforce least-privilege access and collect attestations of completion.
• Drive audit readiness and evidence collection across various standards.
• Produce regular reports, KPIs, and risk metrics for leadership.
• Partner cross-functionally with Security, Privacy, Compliance, Procurement, and application teams.

Benefits

• Remote work with occasional travel to headquarters in Houston, Texas.
• Flexible work environment.
• Opportunities for professional development.

Company Description

Baylor Genetics is proud to be an equal opportunity employer committed to fostering an inclusive and diverse workplace. We welcome and encourage applicants from all backgrounds to apply.