The Staff Digital Auditor will oversee Third-Party Risk Management, ensuring compliance, managing performance, and continually improving governance frameworks and risk strategies in collaboration with external partners.
Job Description SummaryAs Staff Digital Auditor, you will play a key role in setting the strategy of Third-Party Risk Management (TPRM) for GE Vernova as well as overseeing and governing services delivered by our external Managed Service Provider (MSP). This role is responsible for ensuring that the MSP meets contractual obligations and performance indicators, as well as tracking, reporting and handling escalations.
This role will ensure that our TPRM strategy, standards, and governance framework remain effective, consistent, and aligned with organizational objectives. The individual will act as the GE Vernova point of contact of TPRM governance, driving oversight, compliance, and continuous improvement.Job Description#LI-Remote - This is a remote position
This role will ensure that our TPRM strategy, standards, and governance framework remain effective, consistent, and aligned with organizational objectives. The individual will act as the GE Vernova point of contact of TPRM governance, driving oversight, compliance, and continuous improvement.Job Description
Key Responsibilities
- Governance & Oversight
- Maintain and operationalize the organization’s TPRM strategy, playbook, standard work, and governance framework.
- Establish and maintain governance frameworks to oversee MSP TPRM operations.
- Monitor compliance with contractual obligations and performance indicators (KPIs/SLAs).
- Conduct regular governance meetings with the external partner and internal stakeholders.
- Risk & Compliance
- Ensure adherence to organizational policies, regulatory requirements, and industry standards.
- Monitor risk assessments, control testing, and remediation of findings.
- Review and assess supplier-proposed contract redlines related to cybersecurity requirements to ensure alignment with organizational standards and risk posture.
- Performance Management
- Track and report on third-party performance, including but not limited to, incident response, vulnerability management, and risk remediation.
- Review monthly/quarterly security metrics, dashboards, and reports for accuracy and effectiveness.
- Escalate risks, gaps, and deviations to senior leadership with actionable recommendations.
- Stakeholder Management
- Act as the liaison between the TPRM organization and the MSP cybersecurity partner.
- Partner with DT, Cyber, Legal, Sourcing and Business teams to ensure security alignment with business objectives.
- Provide clear and timely communication on risks, incidents, and remediation status.
- Continuous Improvement
- Drive process improvements in governance, risk management, and compliance monitoring.
- Monitor industry trends, regulations, and emerging risks to keep TPRM strategy up to date.
- Benchmark MSP services against industry best practices.
- Recommend enhancements to security policies, standards, and frameworks.
Skills
- Strong understanding of third-party/vendor cyber risk management.
- Experience with cybersecurity frameworks: ISO 27001, NIST CSF, etc.
- Familiarity with regulatory requirements.
- Strong audit experience and ability to review technical/operational security reports.
- Excellent stakeholder management and communication skills.
- Professional certifications preferred: ISO 27001 LA, CISA etc.
Relocation Assistance Provided: No
Top Skills
Iso 27001
Nist Csf
GE Vernova Cambridge, Massachusetts, USA Office
58 Charles St, Cambridge, MA, United States, 02141
Similar Jobs
Agency • Digital Media • eCommerce • Professional Services • Software • Analytics • Consulting
The AEM Architect will lead engineering solutions, mentor a team, convert business needs to technical specifications, and ensure high availability in systems.
Top Skills:
AemApache Web ServerCommerceJavaJcrMulesoftOsgiSalesforceSling
Cloud • Fintech • Information Technology • Machine Learning • Software • App development • Generative AI
The Implementation Consultant implements accounting software for clients, manages projects, advises on best practices, and solves application issues while ensuring customer satisfaction.
Top Skills:
Accounting SoftwareMS OfficeMs ProjectSalesforce
Cloud • Fintech • Information Technology • Machine Learning • Software • App development • Generative AI
The Enterprise Account Manager develops and maintains client relationships, ensures satisfaction, manages account activities, achieves sales targets, and collaborates with various departments to meet client expectations.
Top Skills:
Customer Relationship Management Systems
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
