Third-Party Risk Management (TPRM) Consultant

Wheeler Staffing Partners

Dallas, TX

JOB DETAILS
SALARY
$60
LOCATION
Dallas, TX
POSTED
30+ days ago

Third-Party Risk Management (TPRM) Consultant
Location: Dallas, TX (Remote with periodic onsite presence required)
Employment Type: Contract (3–6 months)
Pay Rate: Hourly, DOE
Schedule: Standard business hours, Monday – Friday

Position Overview
Wheeler Staffing Partners is seeking an experienced Third-Party Risk Management (TPRM) Consultant to design, enhance, and operationalize a comprehensive vendor risk management program within a complex, highly regulated environment. This consultant will play a critical role in strengthening vendor risk governance, developing scalable frameworks, and ensuring compliance with industry and regulatory standards.

This role requires hands-on experience building or maturing TPRM programs, including vendor risk tiering, assessment methodologies, workflow development, continuous monitoring strategies, and governance reporting. The consultant will collaborate closely with Information Security, Procurement, Legal, Compliance, and business stakeholders to improve vendor risk oversight and operational resilience.

Key Responsibilities

TPRM Program Development and Implementation

  • Design and formalize a scalable Third-Party Risk Management framework

  • Develop and refine vendor risk tiering methodologies and classification models

  • Establish inherent and residual risk scoring methodologies

  • Create standardized vendor risk assessment procedures, questionnaires, and control validation processes

  • Define vendor risk lifecycle processes from onboarding through offboarding

Risk Assessment and Vendor Oversight

  • Review vendor inventory and classify vendors based on risk level and criticality

  • Conduct risk assessments for high-risk and critical vendors

  • Develop issue tracking, remediation, and escalation workflows

  • Define continuous monitoring procedures and vendor reassessment cadence

  • Establish vendor security requirements and minimum control expectations

Governance, Compliance, and Reporting

  • Align TPRM program with regulatory and industry frameworks, including:

    • NIST Cybersecurity Framework (CSF)

    • NIST 800-53

    • HIPAA

    • PCI DSS

    • TX-RAMP

    • ISO 27001

  • Develop governance dashboards, metrics, and executive-level reporting

  • Create documentation, policies, standards, and procedures supporting the TPRM program

  • Provide recommendations and roadmap for TPRM maturity improvement

Process Integration and Automation

  • Design workflows integrating vendor risk management into procurement and contract lifecycle processes

  • Support implementation and optimization of workflows within GRC platforms

  • Partner with internal stakeholders to improve vendor onboarding, assessment, and monitoring processes

  • Identify opportunities for automation and operational efficiency

Stakeholder Collaboration and Advisory Support

  • Partner with Information Security, Procurement, Legal, Compliance, and operational teams

  • Provide guidance on vendor risk management best practices

  • Communicate risk findings and recommendations to leadership and executive stakeholders

  • Translate technical risk concepts into business-focused recommendations

Required Qualifications

  • 8+ years of experience in Information Security, Risk Management, Governance, Risk, and Compliance (GRC), or related field

  • Proven experience building or maturing a Third-Party Risk Management program

  • Strong knowledge of third-party risk lifecycle management and vendor risk assessment methodologies

  • Experience with inherent and residual risk scoring models

  • Experience validating security controls and assessing vendor risk posture

  • Strong understanding of regulatory and compliance frameworks (NIST, HIPAA, PCI, ISO 27001, TX-RAMP, etc.)

  • Experience implementing or optimizing workflows in GRC platforms such as ServiceNow, AuditBoard, or Archer

  • Excellent analytical, documentation, and program development skills

  • Strong communication skills with the ability to present to executive stakeholders

Preferred Qualifications

  • Professional certifications such as CISSP, CISM, CRISC, or similar

  • Experience working in healthcare, academic, or highly regulated environments

  • Experience with cloud and SaaS vendor risk assessments

  • Experience with vendor continuous monitoring and risk quantification methodologies

  • Experience supporting state-regulated or compliance-driven organizations

  • Experience with data automation, reporting dashboards, or vendor risk tools

Work Environment

  • Remote work environment with periodic onsite presence required in Dallas, TX

  • Collaborative cross-functional work environment

  • Opportunity to design and implement enterprise-level risk management processes

Key Skills and Competencies

  • Third-Party Risk Management (TPRM)

  • Vendor Risk Assessment

  • Governance, Risk, and Compliance (GRC)

  • Information Security Risk Management

  • Regulatory Compliance (NIST, HIPAA, PCI, ISO 27001)

  • Risk Scoring and Risk Tiering

  • Vendor Lifecycle Management

  • Risk Analysis and Reporting

  • GRC Platforms (ServiceNow, AuditBoard, Archer)

  • Process Design and Workflow Optimization

Why Work with Wheeler Staffing Partners
Wheeler Staffing Partners connects highly skilled professionals with leading organizations across healthcare, technology, and professional services industries. We are committed to supporting your career growth by providing access to impactful opportunities, competitive compensation, and ongoing support throughout your assignment. Our team serves as a dedicated partner and advocate, helping you achieve your professional goals and long-term career success.

About the Company

W

Wheeler Staffing Partners

Wheeler Staffing Partners' (WSP) has outstanding client relationships providing consultants with access to some of the most desirable employment opportunities across the nation. Our experience, the solutions we provide, our business processes, and partnerships with our consultants and clients has made the company one of the most sought after placement firms for job seekers and companies of all sizes. WSP, provides all candidates with career opportunities, skill assessments, and interview consulting services and our clients with the candidates that meet their culture and skill set. From our Executive Retained Search Teams, Direct Hire and Contract Staffing Professionals to our RPO Service offerings, we create models to deliver a world-class service, with a sense of urgency and professionalism at the best price. Let us put our expertise and services to work for you!

COMPANY SIZE
50 to 99 employees
INDUSTRY
Staffing/Employment Agencies
FOUNDED
2014
WEBSITE
http://wheelersp.com/