Senior Director, Enterprise Third Party Risk
Vertex Pharmaceuticals
3 days ago
Remote friendly (Boston, MA)
United States
Corporate Functions
Key Duties & Responsibilities
- Lead an end-to-end (E2E) enterprise third-party risk management program, including a centralized risk management team.
- Shape and maintain an integrated enterprise view of third-party risk exposure across risk dimensions; collect inputs from business/function leaders and report to key stakeholders.
- Oversee supplier criticality assessments across the supplier lifecycle and prioritize risk processes.
- Oversee third-party risk assessments and updates for critical suppliers using a central risk tool; ensure required inputs and automated metrics.
- Maintain a centralized supplier risk repository (risk action plans, timelines, ownership) and produce regular multi-dimensional risk reporting.
- Maintain a risk appetite matrix and risk mitigation action list; syndicate and incorporate business-lead inputs.
- Coordinate mitigation action reviews and escalate as needed; support governance/escalation committees.
- Ensure appropriate tools/technology support (central supplier risk register; automate assessment and tracking).
- Manage resources across a hybrid centralized and federated operating model.
- Partner with strategic sourcing/business owners to integrate supplier landscape insights into the strategy; drive risk visibility and actions (mitigations, acceptance).
- Own third-party risk processes, policies/procedures, governance, RACIs, and inherent/residual monitoring/reporting.
- Define risk metrics/KPIs/SLAs and oversee impact measurement and program outcomes; promote best practices and continuous improvement.
Required Education
- University degree in Accounting, Finance, or Risk Management
Required Experience
- 12+ years’ experience in risk
Required Knowledge/Skills
- Strong third-party risk management policy/procedure knowledge
- Excellent communication with senior leadership and third parties
- Advanced analytical/business skills; enterprise mindset; ability to lead governance programs
- Strong project/program management; process improvement mindset/tools; cross-functional leadership and collaboration
Preferred
- Certified professional certifications; experience at large multinational publicly held companies
Compensation
- Pay range: $220,000–$330,000; eligible for annual bonus and annual equity awards
- Lead an end-to-end (E2E) enterprise third-party risk management program, including a centralized risk management team.
- Shape and maintain an integrated enterprise view of third-party risk exposure across risk dimensions; collect inputs from business/function leaders and report to key stakeholders.
- Oversee supplier criticality assessments across the supplier lifecycle and prioritize risk processes.
- Oversee third-party risk assessments and updates for critical suppliers using a central risk tool; ensure required inputs and automated metrics.
- Maintain a centralized supplier risk repository (risk action plans, timelines, ownership) and produce regular multi-dimensional risk reporting.
- Maintain a risk appetite matrix and risk mitigation action list; syndicate and incorporate business-lead inputs.
- Coordinate mitigation action reviews and escalate as needed; support governance/escalation committees.
- Ensure appropriate tools/technology support (central supplier risk register; automate assessment and tracking).
- Manage resources across a hybrid centralized and federated operating model.
- Partner with strategic sourcing/business owners to integrate supplier landscape insights into the strategy; drive risk visibility and actions (mitigations, acceptance).
- Own third-party risk processes, policies/procedures, governance, RACIs, and inherent/residual monitoring/reporting.
- Define risk metrics/KPIs/SLAs and oversee impact measurement and program outcomes; promote best practices and continuous improvement.
Required Education
- University degree in Accounting, Finance, or Risk Management
Required Experience
- 12+ years’ experience in risk
Required Knowledge/Skills
- Strong third-party risk management policy/procedure knowledge
- Excellent communication with senior leadership and third parties
- Advanced analytical/business skills; enterprise mindset; ability to lead governance programs
- Strong project/program management; process improvement mindset/tools; cross-functional leadership and collaboration
Preferred
- Certified professional certifications; experience at large multinational publicly held companies
Compensation
- Pay range: $220,000–$330,000; eligible for annual bonus and annual equity awards