Sr. Legal Risk Manager - Remote

Overview

The Sr. Legal Risk Manager is responsible for managing and growing a comprehensive third-party risk management program at Privia Health, ensuring the protection of information assets against cyber threats.

In Short

• Manage and grow the Third-Party Risk Management (TPRM) Framework.
• Lead the Third Party Access Committee (TPAC) for vendor evaluations.
• Ensure compliance with HIPAA, SOX, HITRUST, and other regulations.
• Collaborate with cross-functional teams to identify and mitigate risks.
• Implement and maintain TPRM software solutions.
• Track and maintain records of TPAC submissions.
• Work with cybersecurity teams to manage vendor risks.
• Conduct periodic reviews of approved third parties.
• Develop and maintain an inventory of third parties.
• Communicate complex concepts effectively to stakeholders.

Requirements

• Bachelor's Degree in Information Technology, Cybersecurity, or related field.
• 5+ years in third-party risk management or information security.
• Experience with TPRM software and security frameworks.
• Strong knowledge of regulatory compliance requirements.
• Excellent written and oral communication skills.
• Strong project management and analytical skills.
• Ability to work independently and manage multiple priorities.
• Must comply with HIPAA and other regulations.

Benefits

• Medical, dental, vision, and life insurance.
• 401K and paid time off.
• Annual bonus targeted at 15%.
• Restricted stock units.
• Expense reimbursement for remote work costs.