Sr. Legal Risk Manager

Title: Senior Legal Risk Manager Category: Jobs Organiser: Privia Health Description: Privia Health is seeking a Senior Legal Risk Manager (Third-Party Enterprise Risk Manager) to oversee and expand a comprehensive third-party risk management (TPRM) program. Reporting to the Chief Information Security Officer (CISO), the successful candidate will be responsible for safeguarding the organization’s information assets against cyber threats originating from third and fourth parties. This role involves leading the Third Party Access Committee (TPAC) and ensuring that all vendor engagements align with the organization’s strategic security posture. The manager will drive compliance with critical federal and state regulations, including HIPAA, SOX, and HITRUST, while implementing industry best practices for vendor risk management. Key responsibilities include designing and maintaining the TPRM framework, collaborating with the AI Governance Committee, and managing cybersecurity risks within vendor contracts. The role also involves coordinating periodic reviews of approved third parties and maintaining a robust inventory of data exchanges to ensure organizational transparency and security. Eligibility: * Bachelor's Degree in Information Technology, Cybersecurity, Risk Management, or a related field (equivalent work experience preferred). * Minimum of 5 years of progressive experience in third-party risk management, information security, or a related field. * At least 2 years of experience in a leadership or lead role. * Demonstrated knowledge of security frameworks (e.g., NIST, HITRUST) and regulatory requirements (e.g., SOX, HIPAA). * Proficiency in managing TPRM software and analytical tools (e.g., Excel, Google Sheets). * Remote Work Requirement: Minimum internet speeds of 5 MBPS download and 3 MBPS upload. Deadline: Not specified Location: United States (Remote options available) Fees: None Application Link: https://www.linkedin.com/jobs/view/sr-legal-risk-manager-at-privia-health-4391530664 Contact Information: Not specified