Vendor Manager

Responsibilities

• Advance the vendor governance program into a strategic, risk-driven function focused on AI, data exposure, and technology portfolio optimization.
• Conduct AI-focused vendor risk assessments, including model usage, training data sources, and data retention practices.
• Maintain the contract repository, track renewal dates, and coordinate with Legal and Procurement.
• Manage the enterprise SaaS inventory and develop rationalization strategies to reduce redundant platforms.
• Review AI and data-related contract clauses, including data ownership, residency, and model training rights.
• Develop vendor risk dashboards and executive-level reporting on AI exposure and data risk trends.
• Partner cross-functionally with Security, Legal, and Compliance to mitigate Shadow AI usage and ensure responsible technology adoption.

Requirements

• 3–5+ years of experience in vendor management, third-party risk, IT governance, or risk analysis.
• Proficiency in LLM technology and the ability to use LLM-based tools for research and analysis.
• Experience reviewing vendor contracts and tracking renewals.
• Exposure to third-party risk assessments and security questionnaire processes.
• Experience managing SaaS inventories or technology portfolios.
• Proficiency in Excel and vendor management platforms.
• Ability to work on-site in Malvern, PA, five days a week.

Preferred Qualifications

• Experience supporting SOC 2, ISO 27001, or similar audits.
• Familiarity with OneTrust or other TPRM platforms.
• Exposure to AI governance, data risk management, or emerging technology risk.
• Understanding of AI model risk principles such as bias and explainability.

Benefits

• 401(k) plan with company contribution up to 16%.
• Generous time off package including paid vacation, personal, sick, and holidays.
• Paid maternity and parental leave.
• Tuition reimbursement.
• Medical, dental, vision, and prescription coverage.
• On-campus perks including free daily lunch, an onsite fitness center, and walking paths.

About the Company

The Institutes® are a not-for-profit comprised of diverse affiliates that educate, elevate, and connect people in the essential disciplines of risk management and insurance. Located in Malvern, Pennsylvania, we empower organizations to understand, predict, and prevent losses to create a more resilient world.