Director of Third‑Party Risk Management (BPO)

About the role

The Director of Third‑Party Risk Management (BPO) leads a global, enterprise‑wide program that mitigates anti‑bribery and anti‑corruption risks in third‑party intermediary engagements. Reporting to the Senior Director of HCC Risk Management Strategy & Enablement, the role partners with Compliance, Legal, IT, Procurement and other functions to embed risk controls into everyday business processes.

Key responsibilities

• Provide strategic direction and governance for the global TPRM program as Business Process Owner.
• Establish policies, procedures and oversight structures to manage third‑party intermediary risks across all regions.
• Develop and maintain a risk‑based segmentation and assessment framework for third parties.
• Implement enabling technology solutions and continuously improve global processes and tools.
• Ensure alignment with local regulatory requirements while driving consistency worldwide.
• Champion an ethical business culture and foster cross‑functional collaboration.

Required profile

• Proven senior leadership experience in third‑party risk management, compliance or related fields.
• Deep knowledge of anti‑bribery/anti‑corruption regulations such as the FCPA.
• Strong ability to influence stakeholders across legal, compliance, IT and procurement.
• Track record of designing and governing enterprise‑wide risk programs.

Required skills

What we offer

• Opportunity to shape a global risk program for a leading healthcare company.
• Collaborative, inclusive work environment aligned with Johnson & Johnson’s Credo.