Find Jobs
Find Jobs Near You – Available Work in Your Location
IT Security Manager - Third-Party IT Risk Manager
Choose a Location
This role is available in multiple locations. Pick one to apply.
Career Insights for Cyber Security Manager / Administrator
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on Illinois data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
A Cyber Security Manager or Administrator monitors, controls, and maintains systems that protect the security of large databases, including databases with customer information and patient files. Manages and administers the examination of client computer systems, identification of weak points in security, development and implementation of new systems, and monitoring and response to security issues.
$125,681 / year median in Illinois
+5% projected growth
Job Description
- Third‑Party IT Risk Manager
- is responsible for leading and modernizing Wolters Kluwer's global third‑party cyber risk management capability across a highly distributed, market‑driven technology and supplier landscape.
Responsibilities:
- Program Leadership & Modernization
- Lead and evolve Wolters Kluwer's global Third Party Risk Management (TPRM) program and operating model, ensuring it is scalable, risk based, and aligned with enterprise cyber risk governance.
- Modernize TPITRM by shifting from a primarily questionnaire driven approach to a data driven program that incorporates technical validation, continuous monitoring, AI, and risk quantification.
- Lead, whether functionally or formally - junior team members as a manager level leader across the TPRM function to drive successful outcomes across the entire TPRM unit.
- Continuous Monitoring, Automation & Innovation
- Implement continuous monitoring capabilities to deliver near real time visibility into third party cyber posture, control performance, and emerging risk indicators.
- Design and deploy innovative approaches—including automation and AI assisted techniques—for evidence collection, risk scoring, and exception management.
- Continuously assess emerging tools, data sources, and assurance models to improve risk coverage, reduce assessment friction, and enhance signal quality beyond traditional questionnaires.
Contract Review:
- Strong skills in the development, review, and analysis of third party contracts to ensure Company requirements, principles, and assets are sufficiently protected in accordance with internal expectations.
- Strong business acumen and ability to identify technical and functional requirements that do not align or meet Company needs, suggest enhancements, and have them accepted and implemented by the supplier.
- Governance, Reporting & Escalation
- Maintain a centralized, enterprise wide inventory of third party relationships, risk tiers, and risk treatment decisions.
- Provide clear, concise reporting on third party cyber risk posture, trends, and concentration risk to senior leadership.
- Leadership & Collaboration
- Build, lead, and develop a high performing team of third party risk professionals and technical reviewers.
- Foster a culture of accountability, innovation, and constructive challenge consistent with Wolters Kluwer values and operating principles.
- Job Qualifications
- Bachelors degree in computer science, information security, management information systems or similar.
- 12+ years of experience in cybersecurity, technology risk, or information security, including significant ownership of third party or supplier cyber risk management in large, complex enterprises.
- 5+ years of leadership (direct managerial experience or functional delivery leading teams).
- Proven experience designing and leading a global TPRM program across the full third party risk lifecycle.
- Demonstrated success modernizing TPRM by implementing risk based approaches that integrate technical validation, automation, and continuous monitoring.
- Demonstrated success owning decisions and outcomes at a senior level independently without formal authority.
- Strong technical fluency across cloud platforms, APIs, identity, data flows, and integration architectures, with the ability to partner credibly with security architects and technical SMEs.
- Experience overseeing advanced technical assessments for high risk or critical third parties, such as architecture reviews, vulnerability assessments, penetration testing, and threat modeling.
- Ability to operate effectively in highly distributed, market driven environments.
- Demonstrated leadership experience, including building high performing teams and influencing senior stakeholders across Technology, Procurement, Legal, Privacy, and Enterprise Risk Management.
- Strong executive communication skills, with experience reporting third party cyber risk posture and trends to senior leadership.
- Preferred qualification
- Familiarity with systemic, concentration, and fourth‑party risk.
- Working knowledge of
NIST CSF, ISO
27001, GDPR, and CCPA.- Relevant certifications (e.g., CISSP, CISM, CTPRP, CRISC, CISA) \#LI-Hybrid
- Our Interview Practices
- _To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts.
Compensation:
- $118,300.00 - $207,400.00 USD This role is eligible for Bonus. _Compensation range listed is based on primary location of the position. Actual base salary offer is influenced by a wide array of factors including but not limited to skills, experience and actual hiring location. Your recruiter can share more information about the specific offer for the job location during the hiring process._
- Additional Information
- :•Wolters Kluwer offers a wide variety of competitive benefits and programs to help meet your needs and balance your work and personal life, including but not limited to: Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave.