Third Party Risk Management and Customer Trust Lead

Architect and run a substantive third-party risk management program across external services and AI model partners. Assess real vendor and model risk using SOC 2 documentation, security assessments, pen test findings, and architecture artifacts. Partner with Legal to review and redline vendor and AI contract terms (e.g., DPAs and subprocessor agreements), maintain risk registers, and mature a customer trust program supported by continuous monitoring.