SS
Senior Vendor & Contract Mgr
Sunrise Systems Inc
- 🇺🇸 United States
- Hybrid
- Senior
- 1 day ago
- NIST
- Risk Management
- SOC2
- ISO 27001
- ACA
1 day ago
Job ID: 26-05333
Location: Trenton, NJ
Duration: 06 months' contract
Description:
Senior Vendor & Audit Contract Manager reporting to the CIO to lead third-party -party risk, IT audit readiness, remediation, and policy lifecycle management, aligning public sector systems with NIST, SOC, and enterprise IT security baselines.
We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance, third-party governance, IT audit readiness, and policy lifecycle management across our technology ecosystem.
Key Responsibilities:
- Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.
- Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.
- Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
- Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.
- Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.
- Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
- Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.
Qualifications:
- 8+ years of IT compliance, third-party risk management (TPRM), and audit governance experience within large-scale enterprise environments.
- Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.
- Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
- Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.
Skill Table:
| Skill | Required / Desired | Amount | of Experience |
| IT Compliance, ITGC & Audit Governance in Enterprise Environments | Required | 8 | Years |
| Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies | Required | 7 | Years |
| Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans | Required | 7 | Years |
| Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks | Required | 7 | Years |
| Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification | Highly desired | 7 | Years |
| Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations | Highly desired | 7 | Years |
| Bachelor's Degree minimum | Required |
Compensation:
The hourly rate for this position is between $80.00-86.00 per hour.
Factors which may affect starting pay within this range may include [geography/market, skills, education, experience and other qualifications of the successful candidate].
Benefits:
Sunrise offers ACA compliant medical coverage/dental insurance/vision insurance to all employees. We also offer Sick time benefits as required per State regulations.
Contact:
Jaya Balaji: jayabalaji.s@sunrisesys.com | (732) 515-5373 | URL: www.sunrisesys.com
Senior Vendor & Contract Mgr · Sunrise Systems Inc