Find Jobs
Find Jobs Near You – Available Work in Your Location
Skip to job details
BA
Bath and Body Works
Third-Party Risk Management (TPRM) Program Manager
Career Insights for Ethics Compliance Manager
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on Ohio data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
An Ethics Compliance Manager tracks employer compliance with ethical standards in addition to laws and regulations. Creates company policies, reviews departmental functions and protocol, follows developments in law and regulations affecting the industry and evolving ethical standards related to public regulations and industry practice.
$185,434 / year median in Ohio
+6% projected growth
Job Description
At Bath & Body Works, we believe everybody deserves to feel good. When you join us, you're part of more than an iconic fragrance and personal care brand — you become part of Gingham Nation, where people are at the center of everything we do. We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day. We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day. The Third-Party Risk Management (TPRM) Program Manager will support Bath & Body Works' Ethics & Compliance Department and is responsible for supporting and enhancing the company's enterprise-wide program for assessing, monitoring, and mitigating risks associated with vendors, suppliers, service providers, and other external partners. This role helps ensure that third-party relationships align with the company's operational, security, compliance, and consumer experience standards. In a retail and distribution environment where supply chain efficiency, data protection, and consumers trust are essential, this position works in parallel with the enterprise strategy and governance needed to safeguard the organization. The TPRM Program Manager reports to the Director of Third-Party Compliance. Responsibilities
- Partner with Procurement, Legal, Information Security, Compliance partners, ERM and business units to embed risk controls throughout the vendor lifecycle.
- Support maintaining a centralized inventory of third‑party relationships and ensure proper risk classification.
- Help facilitate end‑to‑end third‑party risk assessments, including onboarding due diligence, periodic reviews, and offboarding evaluations.
- Assess vendor controls related to information security, data privacy, operational resilience, financial health, and regulatory compliance.
- Support the implementation of continuous monitoring processes for high‑risk and critical vendors.
- Support regulatory exams, internal audits, and cross‑functional compliance initiatives.
- Support third‑party incident reporting, critical issue, and remediation processes.
- Support root‑cause analysis for vendor-related operational or security issues as appropriate.
- Prepare timely documentation and communication of third-party risk issues affecting business operations.
- Provide subject matter expertise on third‑party risk across the company.
- Provide training and guidance to business partners on risk assessment processes and vendor management standards.
- Build strong relationships with internal and external partners. Qualifications
- Minimum 7+ years' experience in vendor management, risk management, procurement, compliance, or cybersecurity.
- Strong understanding of third-party risk frameworks.
- Experience working with vendor management or GRC platforms.
- Ability to analyze complex issues, summarize risk findings, and communicate to executive audiences. Education
- Bachelor's Degree in a related field or education equivalent.