Third Party Risk Management (TPRM) Team Lead

About the role

Anthropic's Third Party Risk Management (TPRM) team sits within Security GRC and is responsible for risk management of our vendor and partner relationships, making risk visible to the people who need to act on it, and driving it down.

This role owns the top of that risk stack. You will run the Mission Critical and Highest-Risk vendor portfolios.

Key responsibilities

• Own the Mission Critical vendor portfolio: maintain the tiered list, validate it against business impact analysis findings, support exit and failover planning, and drive risk treatment for single points of failure with Procurement, Business Continuity, and business owners
• Manage the Highest-Risk vendor portfolio: keep security, privacy, and compliance assessment depth aligned to active vendor exposure, and drive remediation with the relevant domain teams
• Support vendor incident response: vendor-side impact assessment, business-owner coordination, and post-incident risk treatment
• Run inherent risk assessments through the intake workflow: review agent-prefilled tiering, evaluate vendor controls and evidence across security, privacy, compliance, and operational risk, determine residual risk, and route to domain reviewers where deeper assessment is warranted
• Operate the TPRM issue management workflow: document findings with clear risk statements, assign owners, track treatment to closure
• Tune and maintain the TPRM Risk Agent alongside the team through prompt development, backtest calibration, error analysis, and output QA
• Contribute to KPI/KRI reporting on portfolio coverage and cycle time