Senior Technical Program Manager, Third Party Risk Management

Location: Livingston, NJ; New York, NY; Sunnyvale, CA; or Bellevue, WA. Applicants must meet U.S. export-control eligibility requirements, including U.S. person status or eligibility for the required authorization.

Base salary: $157,000–$210,000 per year, plus discretionary bonus, equity awards, and benefits.

Company

CoreWeave provides cloud infrastructure, technology, tools, and teams for building and scaling AI applications.

What you will do

• Maintain a complete register of external data sharing, including data categories, purposes, legal bases, transfer mechanisms, and contractual restrictions.
• Design and operationalize controls for new external data shares, including pre-share reviews, data minimization, approved transfer methods, and documented approvals.
• Monitor external data flows for undocumented, expired, or out-of-scope sharing and drive remediation with accountable teams.
• Define metrics and reporting on data-mapping coverage and external-sharing risk for leadership and governance forums.
• Contribute to the TPRM strategy and roadmap and conduct third-party security risk assessments covering controls, contracts, and compliance documentation.
• Serve as the technical subject matter expert for TPRM and privacy risks, communicating remediation strategies to technical and executive audiences.

Requirements

• At least 5 years of experience in third-party risk management, data governance, privacy, or information-security risk, including at least 2 years focused on external data sharing.
• Experience building data inventories or data maps covering classification, processing purpose, legal basis, and cross-border transfer mechanisms.
• Hands-on experience with third-party security risk assessments, security controls, contractual security and privacy terms, and compliance artifacts such as SOC 2, ISO 27001, and penetration-test reports.
• Working knowledge of GDPR, CCPA/CPRA, SCCs, DPAs, adequacy decisions, NIST CSF, ISO 27001/27701, and SOC 2.
• Experience operating repeatable review or approval workflows, defining leadership metrics, and driving remediation to closure across cross-functional teams.
• Must satisfy U.S. export-control access requirements for controlled information.

Nice to have

• Experience working with cloud service providers or hyperscalers.
• Ability to write lightweight SQL, Python, or scripting automation for data-sharing inventories.
• Experience supporting audits, certifications, customer or regulator inquiries, and DPA or subprocessor agreement reviews.
• Experience building a TPRM program from the ground up.

Culture & Benefits

• Full-time employment with medical, dental, and vision insurance fully paid by CoreWeave.
• Life, disability, mental wellness, family-forming, parental-leave, and childcare benefits.
• 401(k) with employer match, employee stock purchase program, tuition reimbursement, flexible spending and health savings accounts.
• Flexible paid time off and a casual work environment focused on innovation.
• Catered lunch at office and data-center locations.