About the Role
This is an individual contributor role for someone who can operate at a senior level—balancing expert risk analysis, cross-functional coordination, regulatory awareness, and execution excellence. You’ll lead governance for critical and high-risk vendors, drive completion of incoming partner and client due diligence requests, and innovate efficiency strategies through automation, risk tiering, workflow orchestration, and continuous monitoring.
This role will report to the Director of Security GRC.
Responsibilities
Own and evolve enterprise-wide third-party security risk strategy, including automation, continuous monitoring, and emerging risk domains (e.g., AI/ML vendors)
Liaise with cross-functional teams and leadership to ensure consistent, thorough operationalization of third party security risk controls
Communicate complex vendor risk landscapes and prioritization decisions clearly to senior leadership
Drive alignment on third party risk tolerance, vendor management decisions, and mitigation strategies
Execute completion of and innovate efficiency strategies for incoming due diligence requests from partners and clients
Administer in-scope tech stack (e.g. BlackKite, Responsive, Serval, N8N)
Coach and develop team members, leading large-scale, cross-functional initiatives to mature TPRM capabilities and improve operational efficiency
Contribute to evolution of TPRM best practices across the organization
Maintain and improve third-party security risk framework artifacts, including risk assessment methodology, vendor tiering, control expectations, procedures, and reporting
Partner with Legal, Procurement, and business owners to ensure third-party security risks are appropriately documented, accepted, mitigated, or escalated
Monitor critical and high-risk vendors for control changes, risk signals, remediation progress, and ongoing compliance concerns
Requirements
- 7+ years in risk management, including ownership of program-level strategy, cross-functional influence, and transformation initiatives
- Bachelor’s degree in Computer Science, Risk Management, or related field (or equivalent experience); advanced certifications preferred (e.g., CRISC, CISM, FAIR, or relevant emerging risk training)
- Proven track record of spearheading third party risk program improvements with measurable impact
- Hands-on experience managing third party AI risk
- Excellent communication and stakeholder management skills—especially with senior engineering, product, and business leaders.
- Comfortable operating independently, managing ambiguity, and taking ownership at both strategic and tactical levels.
- Experience developing and managing comprehensive third party program plans, roadmaps, and status updates to keep stakeholders aligned and informed.
- Fluency in cyber risk methodologies – ability to communicate complex risk considerations and proposals to leadership and peers
- Expertise in qualitative and quantitative third-party risk analysis, including the ability to translate risk into business impact
- Substantial experience with AI/automation tools, as well as GRC, TPRM, security ratings, questionnaire automation, or workflow orchestration platforms
- Working knowledge of relevant security and risk frameworks such as SIG, CSA STAR for AI, ISO 27001, SOC 2, PCI DSS, or NIST AI RMF
Preferred
- Experience in payments, fintech, or regulated industries
- Experience with third-party security risk management, client due diligence, and vendor governance in a regulated environment
- Exposure to automation, continuous monitoring, security ratings, questionnaire platforms, or GRC workflow tools
- Deep understanding of AI/ML vendor risk, including how AI-enabled services are assessed, monitored, and governed responsibly
About the Company
At PayNearMe, we’re on a mission to make paying and getting paid as simple as possible. We build innovative technology that transforms the way businesses and their customers experience payments. Our industry-leading platform, PayXM™, is the first of its kind—designed to manage the entire payment experience from start to finish. Every click, swipe or tap is seamless, fast and secure, helping non-commerce businesses boost customer satisfaction, accelerate payments, and reduce costs.
Our single platform handles it all: cards, ACH, digital wallets such as PayPal, Venmo, Cash App Pay, Apple Pay and Google Pay, and even cash at more than 62,000 retail locations nationwide. Today, thousands of businesses across consumer lending, iGaming and online sports betting, property management, and tolling trust PayNearMe to deliver a payment experience that drives real results.
In September 2025, we raised a $50 million Series E funding round to accelerate our growth.
We’re a team of 300+ employees across 41 states, headquartered in Silicon Valley with satellite offices in Dallas, TX and Holmdel, NJ.