Our direct client is looking for a Senior Vendor & Audit Contract Manager for a Hybrid (3 days/week Onsite) Long Term Contract in Trenton, NJ
Note:
- This is a hybrid position - 3 days on-site, and 2 days remote.
J0B DESCRIPTION:
- Senior Vendor & Audit Contract Manager reporting to the CIO to lead third-party -party risk, IT audit readiness, remediation, and policy lifecycle management, aligning public sector systems with NIST, SOC, and enterprise IT security baselines.
Key Responsibilities:
- Lead Third-Party Risk Management (TPRM), establishing vendor vetting, risk scoring, and continuous compliance oversight across cloud providers, software vendors, and system integrators.
- Oversee IT audit readiness and execution, evaluating vendor SOC 1/SOC 2 Type II reports, ISO certifications, and independent third-party control attestations.
- Manage finding remediation lifecycles, driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
- Author, update, and maintain all public-facing and internal IT security, privacy, and technology governance policies, standards, and standard operating procedures (SOPs) to ensure continuous alignment with NIST, state, and federal mandates.
- Enforce IT General Controls (ITGC), access governance, and data protection baselines across internal platforms and external vendor environments.
- Collaborate with Legal and Procurement to review and enforce compliance exhibits, Data Processing/Sharing Agreements, SLAs, and right-to-audit clauses.
- Advise the CIO directly on enterprise compliance posture, delivering executive risk scorecards, audit tracking dashboards, and mitigation strategies.
Qualifications:
- Proven track record authoring and operationalizing enterprise IT security, governance, and data compliance policies.
- Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports, ITGCs, and NIST/ISO control frameworks.
- Strong background presenting risk metrics, compliance status, and audit readouts directly to executive leadership.
SKILL MATRIX:
- IT Compliance, IT& Audit Governance in Enterprise Environments - Required
- Authoring & Updating Enterprise IT Security, Governance & Regulatory Policies - Required
- Audit Finding Remediation, Technical Root-Cause Analysis & Action Plans - Required
- Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks - Required
- Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification - Strong Plus to have
- Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations - Strong Plus to have
- Bachelor’s Degree minimum - Required
Question 1: candidate's email address HERE.
Question 2: Where is the candidate currently geographically located?
Question 3: If the candidate resides more than 1 hour from the client site, will the candidate relocate for the position?
Question 4: Please provide link to LinkedIn profile if available.
Location: Hybrid (3 days/week Onsite), Trenton, NJ
Type: Long Term Contract
