Third Party Risk Manager

Job description

STRS Ohio, STRS The State Teachers Retirement System of Ohio (STRS Ohio) is seeking a Third Party Risk Manager to join the Executive/Business Operations and Security team. Established in 1920 and serving Ohio’s educators, STRS Ohio is one of the nation’s largest retirement systems, serving nearly 550,000 active, inactive, and retired public-school teachers, and university faculty members, managing approximately $96.3 billion as of June 30, 2025, in assets and paying more than $7 billion in benefits annually. STRS Ohio provides a competitive pay, and a comprehensive benefits package including on-site parking, educational assistance, subsidized medical insurance, fully paid dental and life insurance, vacation and sick leave, retirement benefits and on-site fitness center. At STRS Ohio, you can experience rewarding work in a professional, business casual work environment. We welcome, celebrate, and promote respect for everyone. We are continually seeking bright and talented individuals to join our team. Compensation: $67,962 - $81,555 Work Schedule: 8:00am-5:00pm Monday through Friday (Onsite) General Summary: Under the direction of the supervisor, ITS Systems Security, lead the Third-Party Risk Management (TPRM) program for State Teachers Retirement System of Ohio (STRS Ohio). Oversee due diligence, assessment, monitoring and governance activity for third-party relationships to minimize risk exposure and risk impacts to technology and business. Summary of Responsibilities: Develop, implement and continuously improve the organization's third-party risk management strategy, policy and procedures ensuring effective oversight of vendor relationships. Lead the development of pre-contract and self-attestation questionnaires to be completed by prospective and current STRS Ohio vendors. Monitor questionnaire completion, coordinating with vendors and internal stakeholders. Tailor due diligence requirements and questionnaire content based on the vendor's risk profile, criticality and service type. Review and assess vendor contracts to ensure appropriate risk mitigation, including information security, artificial intelligence (AI)/machine learning use and software supply chain protections. Facilitate risk assessments to identify, evaluate and prioritize third-party risks, including subcontractor dependency, operational resilience and emerging threats. Assess third-party relationships for geopolitical, sanctions, and ownership-structure risk in coordination with Sourcing and Vendor Management and Legal/Compliance. Monitor applicable regulatory, cybersecurity and industry developments and recommend enhancements to the TPRM program to address evolving risks and best practices. The above list of duties in intended to describe the general nature and level of work performed by persons assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the persons so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct and control the work of associates under supervision. Summary of Qualifications: Bachelor's degree in computer science, business administration, risk management or related field required. Three or more years’ information technology and third-party risk management experience required. Experience with third party risk management (TPRM) software platforms and risk data analysis/reporting tools preferred. Knowledge of and experience with the following: Third-party risk management frameworks, methodologies and industry best practices required. Regulatory and risk frameworks Familiarity with AI/machine learning risk considerations in vendor relationships preferred Equal Employment Opportunity Employer Statement State Teachers Retirement System of Ohio (STRS) is an Equal Employment Opportunity Employer and prohibits discrimination and harassment of applicants or employees on the basis of race, color, religion, gender, gender identity or expression, national origin (ancestry), military status, disability, age, genetic information, sexual orientation, or caregiver status, in making employment-related decisions about an individual. Visa/Sponsorship To be offered a position with STRS Ohio, you must be either a U.S. citizen or possess proper legal authorization to work in the U.S. for the type of job you are seeking. This position is not eligible for visa sponsorship. Applicants must be authorized to work in the United States without the need for visa sponsorship. ADA Statement STRS Ohio is committed to ensuring access, inclusion, and reasonable accommodations across all its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act (ADA) and other applicable laws. Posting Drug-Free Workplace Statement The State Teachers Retirement System of Ohio (STRS Ohio) is a drug-free workplace. The use of recreational marijuana and non-medical cannabis is strictly prohibited. Pre-Employment Drug Testing All final candidates tentatively selected for employment will be required to undergo a urinalysis drug screening prior to appointment. This screening includes testing for illegal substances, including marijuana. A positive test result will disqualify the applicant from employment unless valid medical documentation is provided for legally prescribed medications or a physician’s recommendation for medical marijuana. Pre-Employment Background Investigation The final candidate selected for this position will be subject to a criminal background check. STRS Ohio will conduct an individualized assessment of any prior criminal convictions before making a determination regarding employment eligibility.