WhatYoullDo

• Assistswith the identification and assessment of risksassociated withthird-party vendors, suppliers, business partners, and outsourced service providers, with a strong focus on technology, cybersecurity, data privacy,and regulatory risks

• Provides support to business owners and project teams to increase awareness and understanding of risks and controls andassistin the development,assessmentand monitoring of mitigation plans for IT-related risks, to ensure they are managed to an acceptable level.Identifies,evaluatesand escalates issues that conflict with BCBSNCs risk tolerance

• Consults on projects and other initiatives to ensurethird partyrisks are considered and addressed appropriately

• Assess the effectiveness of vendor control environments through review of audit reports, certifications, questionnaires, security assessments, and other risk artifacts. Recommend improvements to strengthen risk management practices and reduce exposure.

• Develop metrics, dashboards, and reporting materials that provide management and executive leadership with visibility into third-party risk exposure, emerging risks, remediation activities, and program effectiveness.

• Deliver training, awareness sessions, and stakeholder guidance to promote a strong culture of third-party risk management and ensure consistent application of TPRM requirements across the organization

What You Bring

• Bachelor's degree or advanced degree (whererequired)

• 3+ years of experience in related field

• In lieu of degree, 5+ years of experience in related field

Bonus Points

• Experience conducting IT audits and supporting SOX (Sarbanes-Oxley) compliance audits

• Professional certificationssuch as HITRUST, NIST, SOC 2, and ISO standardspreferred

• Industry-recognized certifications in IT audit, risk management, governance, or compliance, including CISA, CRISC, and CRMA, are a plus

WhatYoullGet

• The opportunity to work at thecutting edgeof health care delivery with a teamthatsdeeply invested in the community

• Work-life balance, flexibility, and the autonomy to dogreat work

• Medical, dental, and vision coverage along withnumeroushealth and wellness programs

• Parental leave and support plus adoption and surrogacyassistance

• Career development programs and tuition reimbursement for continued education

• 401k match including an annual company contribution

WhereYoullWork

Our Hybrid Flex approach is builton presencewith a purpose giving you flexibility to work remotely with intentional in-person connection that supports a workplacethatsflexible, connected, and future focused.

In a Hybrid-Flex role,youwork in the office at least two days a week for collaboration and connection. In a Remote Flex role,youwork virtually, with a few in-office visits each year for meaningful moments that matter.

Whether your role is Hybrid Flex or Remote Flex depends on the nature of the work and distance from our Durham headquarters. We welcome candidates from outside the local area and in anystateslistedonthis job posting. Onsite expectations will be discussed during the interview process.