Strategic IT Vendor Manager: Governance, Risk

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/82ep03

We are looking for a IT Vendor Manager, within the GD&BT; Strategy, Performance & Capabilities unit. The role reports to the IT Strategy, Performance & Capabilities Director and it is based in Parma.
Job purpose
Manage the governance of the IT vendor ecosystem to ensure third‑party services align with business priorities, IT strategy, architecture, risk/compliance, and financial goals. Drive measurable, sustainable value from vendors through strong governance, service quality, risk management, and cost control across the full lifecycle.
Act as the key interface between IT and functions like Purchasing, Legal, Security, Privacy, and Finance to ensure vendors are not just contractually compliant, but operationally effective and value‑generating.
Key Responsibilities
1. Contract Governance & Coordination
- Define and validate IT contract requirements (cybersecurity, cloud, data protection, continuity).
- Ensure contracts include clear, enforceable SLAs, security controls, and cloud responsibilities.
- Translate technical, architectural, and risk needs into contractual terms.




- Maintain alignment between contracts, security requirements, and actual delivery.
- Support intercompany IT service frameworks and group‑wide vendor usage models.

2. Vendor Governance & Strategy
- Develop and improve IT vendor governance frameworks (policies, controls, forums).
- Align vendor strategy with business priorities, architecture, and operating model.
- Segment suppliers by criticality, risk, and strategic importance.
- Monitor performance vs SLAs and business outcomes.
- Drive reviews, issue resolution, and continuous improvement.
- Evaluate vendors on real value: quality, stability, responsiveness—not just contracts.

4. Risk, Cybersecurity & Compliance
- Ensure compliance with internal policies, GDPR, and regulations.
- Enforce security controls (access, incidents, vulnerabilities, continuity).
- Coordinate audits, certifications (e.g., ISO 27001), and remediation.
- Act as the centr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/82ep03