Program Manager, Third Party Risk Management

About the Role:

Gusto is searching for an experienced Program Manager who will be tasked with leading Third Party Risk Management (TPRM) efforts at Gusto, identifying and reducing risks associated with working with third parties. Third parties can include suppliers, product partners, contractors, service providers, and cloud service providers. This role will report directly to the Head of Source to Pay function at Gusto and will be responsible for establishing and maintaining a third party risk management framework across a diverse, cross-functional team of stakeholders.

About the Team:

The Source to Pay (S2P) function at Gusto comprises Procurement, Accounts Payable, Travel & Expense and recently launched TPRM program. Reporting into the CFO organization, S2P is integral to enabling internal stakeholders procure products and services at the best quality/value while at the same time, managing supplier relationships and risk due diligence for Gusto.

Here’s what you’ll do day-to-day:

• Facilitate communication between strategic third parties and internal stakeholders to ensure alignment on risk management objectives and expectations.
• Conduct periodic audits and reviews of third-party compliance with contractual obligations and regulatory standards to ensure ongoing adherence.
• Stay updated on industry regulations and standards, incorporating changes into the third-party risk management process to maintain compliance.
• Prepare detailed reports on third-party risk assessments, mitigation strategies, and compliance status for senior management and stakeholders to ensure transparency and informed decision-making.
• Maintain comprehensive documentation of all third-party risk management activities, including risk assessments, audit findings, and corrective actions to ensure accountability and traceability.
• Participate in professional development activities to stay current with industry trends and advancements in third-party risk management.
• Collaborate with external partners and industry groups to share best practices and enhance the effectiveness of the third-party risk management program.
• Implement technology solutions to streamline third-party risk management processes, enhancing efficiency and accuracy.

Here’s what we're looking for:

• 8+ years of experience in a high-tech company or similar industry, with a strong foundation in Third Party Risk Management (TPRM) programs.
• Deep knowledge of all aspects of Third Party Risk Management, including a strong understanding of regulatory requirements and experience with risk domains related to TPRM, such as Privacy, Information Security, Compliance, operational risk, geopolitical risk, and supply chain risk.
• Familiarity with relevant frameworks and standards, including ISO and NIST, as well as laws and regulations such as GDPR and CCPA/CPRA.
• Experience with program or project management, including supporting long-term strategy consisting of multiple smaller projects, defining program strategy, and establishing metrics for success.
• Excellent negotiating skills with a strong ability to read, analyze, and interpret legal documents.
• Proficiency with tools like Coupa, Ironclad, and NetSuite is preferred.
• Strong attention to detail, along with excellent organizational and communication skills, enabling effective collaboration across functions.
• Effective analytical, problem-solving, planning, and project management skills, with the ability to build and maintain strong cross-functional relationships.

Our cash compensation range for this role is $127,000/yr to $157,000/yr in San Francisco and New York. Final offer amounts are determined by multiple factors, including candidate location, experience and expertise, and may vary from the amounts listed above.