Director of Manufacturing Operations
Hillenbrand
Lead production and supply chain operations at SHICK ESTEVE, a maker of custom food-processing equipment. Drive Lean Manufacturing and improve industrial performance.
Open
Momentive Software develops business-to-business software for nonprofits and associations. Its product suite supports association management, fundraising, event management, learning management, financial operations, and data analytics, helping mission-driven organizations coordinate their work, engage members and donors, and build stronger communities. The company is a substantial software employer, with a reported workforce of 1,001 to 5,000 employees.
Senior Third-Party Risk Management Analyst | Momentive Software | Remote, United States
Lead third-party cybersecurity risk management for Momentive Software’s cloud-based nonprofit and association management platform. Manage vendor assessments, control reviews, audit evidence, compliance activities, and client vulnerability notifications.
Description
- Manage Momentive Software’s global inventory of third-party providers, applications, and services from onboarding through termination.
- Lead vendor cybersecurity assessments in partnership with Cybersecurity Engineering, Legal, and business owners.
- Evaluate vendor maturity against NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other applicable frameworks.
- Oversee vendor SLAs, RPO/RTO commitments, breach notification obligations, and cybersecurity insurance records.
- Record assessment findings, recommendations, and remediation plans.
- Coordinate with internal and external auditors on vendor controls and evidence collection.
- Supply evidence, documentation, and control validation for SOC 2 Type II and PCI DSS assessments.
- Keep policies, standards, procedures, and risk treatment plans complete and audit-ready.
- Track vendor exceptions and compensating controls.
- Support vulnerability notifications for clients responsible for their own cybersecurity controls.
- Advise clients on risk impact, remediation expectations, and cybersecurity practices.
- Maintain records and metrics for client notifications, follow-up activities, and closure.
- Strengthen the ISMS by aligning vendor risk processes with company policies, standards, and procedures.
- Contribute to control selection, risk treatment plans, and cybersecurity control effectiveness metrics.
- Monitor emerging threats, regulatory developments, and industry trends affecting third-party risk.
- Support disaster recovery and business continuity planning for vendor dependencies and resilience.
- Partner with Legal, Cybersecurity, and leadership on strategies to reduce vendor-related risk.
- Promote enterprise cybersecurity awareness through outreach, training, and education.
- Provide professional, consultative support to internal and external stakeholders.
- Mentor colleagues and contribute to training materials and internal documentation.
Requirements
- At least five years of experience in cybersecurity, risk management, audit, or compliance.
- Advanced knowledge of PCI DSS, SOC 2, GDPR, GLBA, HIPAA, SOX, and HITRUST.
- Experience assessing legacy and modern cloud environments, including AWS, Google Cloud Platform, and Azure.
- Strong understanding of APIs, application security, encryption, endpoint security, and network security.
- Familiarity with SIEM, intrusion detection, log management, vulnerability management, and threat intelligence.
- Able to evaluate vendor controls, map them to frameworks, and explain risk to nontechnical stakeholders.
- Strong project management, prioritization, multitasking, and organizational abilities.
- Excellent written and verbal communication skills.
- Experience supporting SOC 2 Type II and PCI DSS audits is preferred.
- Experience with eGRC or IT GRC platforms such as Jira Service Management GRC, Archer, OneTrust, or LogicGate is preferred.
- Certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or CTPRP are preferred.
- Must be authorized to work in the United States without sponsorship.
- Must be at least 18 years old.
Benefits
- Medical, dental, and vision coverage.
- 401(k) savings plan with company matching.
- Flexible planned paid time off.
- Generous sick leave.
- Inclusive and welcoming work environment.
- Purpose-driven company culture.
- Support for work-life balance.
- Commitment to community involvement.
- Employer-paid parental leave.
- Employer-paid short-term disability coverage.
- Remote work flexibility.
Related Jobs
Technical Coordinator, Fund Accounting
Northern Trust
Coordinate complex fund accounting, including reconciliations, daily valuations, and NAV review. Support Northern Trust’s global operations from its onsite Pune team.
Open
Temporary Production Coordinator, Sports Graphics
Warner Bros. Discovery
Create sports graphics, animations and multimedia for Warner Bros. Discovery’s television and digital platforms. Apply football knowledge to projects across social media and the web.
Open
Remote Call Center Agent, Customer Service and Sales
Grupo A365
PeruPEN 1,600 – PEN 1,800 / month
RemoteFull-timeJuniorNo degree requiredSpanish RequiredCall Center RepresentativeProvide remote customer service for Entel, a telecommunications company. Resolve inquiries and sell products through phone and digital channels.
Open
Client Service Analyst – IFM Investors
IFM Investors
Support client reporting, capital transactions and operational queries at IFM Investors, a global asset manager. Help improve reporting accuracy, operational efficiency and the client experience.
Open
Remote IT Support Specialist (Healthcare Software) — Philippines
Sourcefit
Provide phone-based, first-level Windows and software support to healthcare technology users. Resolve application questions, record CRM tickets, and escalate technical issues.
Open
Remote IT Helpdesk Agent in South Africa
Remote Recruitment
Provide first-line IT support remotely from South Africa, handling tickets, account access and device issues. Join a UK-based team and work UK business hours.
Open
Remote Call Center Sales and Customer Service Representative
Grupo A365PeruPEN 1,230 / month
RemoteFull-timeJuniorNo degree requiredSpanish RequiredCall Center RepresentativeRemote sales role handling cross-selling and customer service calls for Entel Chile. Manage calls and sales opportunities, meet performance targets, and attend brief training sessions.
Open
Remote Call Center Sales Representative – Claro Upgrades
Grupo A365Work remotely from Peru advising Claro customers and selling service upgrades. No prior call center experience is required; paid training and unlimited commissions are offered.
Open
Remote Insurance Sales Call Center Representative
Grupo A365A365 is hiring remote sales representatives for its dental insurance call center. The role involves contacting customers, explaining coverage, advising prospects, and closing sales, with uncapped commissions.
Open