Senior Director, Enterprise Third Party Risk
Vertex Pharmaceuticals
August 31, 2026
Remote friendly (Boston, MA)
United States
Corporate Functions
Senior Director, Enterprise Third Party Risk Leader
Responsibilities:
- Lead expanded end-to-end (E2E) third-party risk management process, including central risk management team leadership.
- Shape and maintain an integrated enterprise view of third-party risk exposure across multiple risk dimensions; collect inputs from function/business leads and report to key stakeholders.
- Deploy cross-functional leadership of fit-for-purpose risk practices across the risk community (SMEs, business owners, executive leadership).
- Develop third-party risk strategies; drive risk visibility and risk management actions.
- Manage supplier criticality assessments across the supplier lifecycle; oversee third-party risk assessments/updates for critical suppliers using a central risk tool.
- Maintain centralized supplier risk repository and publish regular multi-dimensional risk/action reporting.
- Maintain and update risk appetite matrix and risk mitigation action list; coordinate mitigation action reviews and escalation governance committees.
- Ensure E2E process is supported by tools/technology (e.g., centralized supplier risk register; automate assessment/tracking).
- Lead within a hybrid centralized/federated operating model; coordinate training/communications for enterprise process awareness.
- Partner to manage risks through mitigation, underwriting/governance, risk acceptance; own third-party risk process/policies/procedures, including governance, RACIs, and inherent/residual monitoring.
Required Education:
- University degree in Accounting, Finance or Risk Management.
- Certified professional certifications preferred.
Required Experience:
- 12+ years’ risk experience.
- Experience in a large multinational, publicly held company highly preferred.
Required Skills/Knowledge:
- Strong third-party risk management policies/procedures knowledge.
- Excellent communication; ability to influence senior leadership.
- Enterprise mindset; strong analytical/process/project management; continuous improvement tools.
- Ability to lead cross-functional teams and establish governance program.
Benefits/Application:
- Annual bonus and annual equity awards (listed in disclosure).
Responsibilities:
- Lead expanded end-to-end (E2E) third-party risk management process, including central risk management team leadership.
- Shape and maintain an integrated enterprise view of third-party risk exposure across multiple risk dimensions; collect inputs from function/business leads and report to key stakeholders.
- Deploy cross-functional leadership of fit-for-purpose risk practices across the risk community (SMEs, business owners, executive leadership).
- Develop third-party risk strategies; drive risk visibility and risk management actions.
- Manage supplier criticality assessments across the supplier lifecycle; oversee third-party risk assessments/updates for critical suppliers using a central risk tool.
- Maintain centralized supplier risk repository and publish regular multi-dimensional risk/action reporting.
- Maintain and update risk appetite matrix and risk mitigation action list; coordinate mitigation action reviews and escalation governance committees.
- Ensure E2E process is supported by tools/technology (e.g., centralized supplier risk register; automate assessment/tracking).
- Lead within a hybrid centralized/federated operating model; coordinate training/communications for enterprise process awareness.
- Partner to manage risks through mitigation, underwriting/governance, risk acceptance; own third-party risk process/policies/procedures, including governance, RACIs, and inherent/residual monitoring.
Required Education:
- University degree in Accounting, Finance or Risk Management.
- Certified professional certifications preferred.
Required Experience:
- 12+ years’ risk experience.
- Experience in a large multinational, publicly held company highly preferred.
Required Skills/Knowledge:
- Strong third-party risk management policies/procedures knowledge.
- Excellent communication; ability to influence senior leadership.
- Enterprise mindset; strong analytical/process/project management; continuous improvement tools.
- Ability to lead cross-functional teams and establish governance program.
Benefits/Application:
- Annual bonus and annual equity awards (listed in disclosure).