The Third-Party Risk Management (TPRM) Program Manager will support Bath & Body Works' Ethics & Compliance Department and is responsible for supporting and enhancing the company's enterprise-wide program for assessing, monitoring, and mitigating risks associated with vendors, suppliers, service providers, and other external partners. This role helps ensure that third-party relationships align with the company's operational, security, compliance, and consumer experience standards. In a retail and distribution environment where supply chain efficiency, data protection, and consumers trust are essential, this position works in parallel with the enterprise strategy and governance needed to safeguard the organization. The TPRM Program Manager reports to the Director of Third-Party Compliance.
Responsibilities
• Partner with Procurement, Legal, Information Security, Compliance partners, ERM and business units to embed risk controls throughout the vendor lifecycle.
• Support maintaining a centralized inventory of third-party relationships and ensure proper risk classification.
• Help facilitate end-to-end third-party risk assessments, including onboarding due diligence, periodic reviews, and offboarding evaluations.
• Assess vendor controls related to information security, data privacy, operational resilience, financial health, and regulatory compliance.
• Support the implementation of continuous monitoring processes for high-risk and critical vendors.
• Support regulatory exams, internal audits, and cross-functional compliance initiatives.
• Support third-party incident reporting, critical issue, and remediation processes.
• Support root-cause analysis for vendor-related operational or security issues as appropriate.
• Prepare timely documentation and communication of third-party risk issues affecting business operations.
• Provide subject matter expertise on third-party risk across the company.
• Provide training and guidance to business partners on risk assessment processes and vendor management standards.
• Build strong relationships with internal and external partners.
Qualifications
• Minimum 7+ years' experience in vendor management, risk management, procurement, compliance, or cybersecurity.• Strong understanding of third-party risk frameworks.
• Experience working with vendor management or GRC platforms.
• Ability to analyze complex issues, summarize risk findings, and communicate to executive audiences.
Education
• Bachelor's Degree in a related field or education equivalent.BenefitsFeeling good starts with you. We invest in benefits that support your well-being, growth and future, helping you thrive as a creator of feel good - every day. Benefits for eligible associates include:
- Robust medical, dental, vision and pharmacy coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.
- No-cost mental health and well-being support through our Employee Assistance Program (EAP).
- 401(k) with company match and Associate Stock Purchase Program with discount.
- Opportunity for paid time off, paid parental leave and access to family building benefits.
- Home, auto and pet insurance and a company-provided Care.com subscription.
- Tuition reimbursement and scholarship opportunities for post-secondary education.
- Enjoy complimentary products and a 40% merchandise discount so you can experience and share the brand you love.
- Visit bbwbenefits.com for more details.
The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.
