> Markdown version of [/jobs/ext/1855699-it-security-manager-third-party-it-risk-manager](https://www.wearedevelopers.com/jobs/ext/1855699-it-security-manager-third-party-it-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Manager - Third-Party IT Risk Manager

- **Company:** Wolters Kluwer
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $118,300.0 - $207,400.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Cyber Security, Data Streaming, Information Technology, Vulnerability Analysis
- **Published:** July 24, 2026
- **Apply:** https://www.chicagocareersite.com/job.asp?id=3331040401&tx=KP9595FFU&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelors degree in computer science, information security, management information systems or similar.
 * 12+ years of experience in cybersecurity, technology risk, or information security, including significant ownership of third party or supplier cyber risk management in large, complex enterprises.
 * 5+ years of leadership (direct managerial experience or functional delivery leading teams).
 * Proven experience designing and leading a global TPRM program across the full third party risk lifecycle.
 * Demonstrated success modernizing TPRM by implementing risk based approaches that integrate technical validation, automation, and continuous monitoring.
 * Demonstrated success owning decisions and outcomes at a senior level independently without formal authority.
 * Strong technical fluency across cloud platforms, APIs, identity, data flows, and integration architectures, with the ability to partner credibly with security architects and technical SMEs.
 * Experience overseeing advanced technical assessments for high risk or critical third parties, such as architecture reviews, vulnerability assessments, penetration testing, and threat modeling.
 * Ability to operate effectively in highly distributed, market driven environments.
 * Demonstrated leadership experience, including building high performing teams and influencing senior stakeholders across Technology, Procurement, Legal, Privacy, and Enterprise Risk Management.
 * Strong executive communication skills, with experience reporting third party cyber risk posture and trends to senior leadership.

Preferred qualification

 * Familiarity with systemic, concentration, and fourth-party risk.
 * Working knowledge of NIST CSF, ISO 27001, GDPR, and CCPA.
 * Relevant certifications (e.g., CISSP, CISM, CTPRP, CRISC, CISA)

## Description

Program Leadership & Modernization

 * Lead and evolve Wolters Kluwer's global Third Party Risk Management (TPRM) program and operating model, ensuring it is scalable, risk based, and aligned with enterprise cyber risk governance.
 * Modernize TPITRM by shifting from a primarily questionnaire driven approach to a data driven program that incorporates technical validation, continuous monitoring, AI, and risk quantification.
 * Lead, whether functionally or formally - junior team members as a manager level leader across the TPRM function to drive successful outcomes across the entire TPRM unit.

Continuous Monitoring, Automation & Innovation

 * Implement continuous monitoring capabilities to deliver near real time visibility into third party cyber posture, control performance, and emerging risk indicators.
 * Design and deploy innovative approaches-including automation and AI assisted techniques-for evidence collection, risk scoring, and exception management.
 * Continuously assess emerging tools, data sources, and assurance models to improve risk coverage, reduce assessment friction, and enhance signal quality beyond traditional questionnaires.

Contract Review:

 * Strong skills in the development, review, and analysis of third party contracts to ensure Company requirements, principles, and assets are sufficiently protected in accordance with internal expectations.
 * Strong business acumen and ability to identify technical and functional requirements that do not align or meet Company needs, suggest enhancements, and have them accepted and implemented by the supplier.

Governance, Reporting & Escalation

 * Maintain a centralized, enterprise wide inventory of third party relationships, risk tiers, and risk treatment decisions.
 * Provide clear, concise reporting on third party cyber risk posture, trends, and concentration risk to senior leadership.

Leadership & Collaboration

 * Build, lead, and develop a high performing team of third party risk professionals and technical reviewers.
 * Foster a culture of accountability, innovation, and constructive challenge consistent with Wolters Kluwer values and operating principles.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)