Third Party Risk Management Manager

Grant Thornton Global Delivery Center Poland (GDC) offers audit, assurance, tax, and advisory services as part of the Grant Thornton International Ltd network, operating in over 150 markets worldwide. The GDC supports multinational platform operations, facilitating collaboration across countries, markets, and time zones, providing opportunities to work on complex projects and develop advanced skills in an inclusive team environment.

• 10+ years of experience in Third-Party Risk Management (TPRM), Supply Chain Risk Management, Information Security Risk, Governance, Risk & Compliance (GRC), or related cybersecurity functions.
• Demonstrated experience leading enterprise-scale TPRM programs, operations, and governance frameworks across multiple regions and business units.
• Strong expertise in supplier risk assessments, due diligence, risk reporting, incident management, and regulatory compliance requirements.
• Hands-on experience with OneTrust TPRM, third-party risk assessment methodologies, workflow configuration, and process optimization.
• Experience with continuous monitoring platforms such as BitSight and integrating security posture insights into risk management decisions.
• Proven leadership experience managing teams, driving organizational change, resolving complex stakeholder issues, and influencing executive-level decisions.
• Familiarity with AI tools, workflow automation platforms, and integrating AI into existing systems is preferred.
• Fluency in Polish and English.

Preferred Qualifications:

• Experience developing automation using Copilot or other Agentic AI frameworks.
• Experience leading TPRM activities during mergers, acquisitions, divestitures, and integration programs.
• Knowledge of emerging risks including AI, cloud security, geopolitical risk, privacy, and evolving regulatory requirements.
• Experience implementing automation, AI-driven workflows, analytics, and operational transformation initiatives within TPRM or cybersecurity programs.
• Familiarity with enterprise risk frameworks and standards such as ISO 27001, NIST, SOC 2, PCI DSS, and privacy regulations.
• Experience collaborating with Procurement, Legal, Privacy, Internal Audit, and Enterprise Risk Management teams.
• Strong executive communication skills with a proven ability to present complex risk concepts to senior leadership, boards, and auditors.

• Lead and evolve the EMEA Third-Party Risk Management (TPRM) program, aligning strategy with regulatory, business, M&A, and InfoSec Supply Chain Risk Management objectives.
• Oversee end-to-end TPRM operations, including due diligence, risk assessments, reassessments, exception management, SLA performance, and operational scalability.
• Develop and deliver executive, regulatory, and operational reporting, providing actionable risk insights and ensuring data accuracy and traceability.
• Lead TPRM integration for M&A activities, including acquisition due diligence, supplier risk assessments, onboarding into TPRM frameworks, and Day-0/30/90 integration objectives.
• Own the supplier security incident management framework, coordinating breach response, impact assessments, remediation, and executive reporting.
• Drive AI, automation, and innovation initiatives to improve efficiency, decision-making, risk visibility, and operational effectiveness across TPRM processes.
• Own and optimize OneTrust TPRM workflows, assessments, questionnaires, control mappings, and platform integrations.
• Govern continuous supplier monitoring through BitSight and similar tools, driving risk-based supplier engagement, remediation, and executive reporting.
• Define, track, and continuously improve TPRM KPIs, KRIs, maturity metrics, and performance reporting.
• Build and lead a high-performing TPRM organization through hiring, workforce planning, mentoring, coaching, succession planning, and stakeholder engagement.