Program Manager - Third Party Risk & Compliance Management

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description Summary: Execute Third-Party Risk & Compliance Management (TPRC) strategies across a global supplier ecosystem. You will blend strategic program management with hands-on operational execution, ensuring effective management of supplier risk, regulatory compliance, and supply chain security. Drive supplier risk, remediation, compliance workflows, and operationalizing regulatory requirements (e.g., EU CRA, MR, NIS2) to strengthen enterprise risk posture and product integrity. This is a collaborative role requiring close engagement with suppliers and cross-functional teams to strengthen Rockwell Automation's supply chain security maturity and compliance outcomes. You will be reporting to Manager, Third-party risk analyst and have a hybrid schedule working in Chennai, India.

Your Responsibilities: Execute Third-Party Risk & Compliance Management (TPRC) strategies to reduce supply chain security risk across suppliers and partners, strengthening supply chain security, product safety, and responsible business practices Deliver TPRC and compliance objectives through effective program management, stakeholder collaboration, and consistent execution of risk, compliance, product safety & business unit requirements . This role will be instrumental in ensuring the realization of business and risk management objectives in partnership with Business Units, Digital Trust, Global Cybersecurity Organization , Product Security, Supplier Quality, Legal & Sourcing, as well as Suppliers & Partners Manage supplier risk assessments across security, compliance, product safety, and regulatory domains, driving structured remediation and timely closure Operationalize strategies to reduce cybersecurity and supply chain risks while ensuring compliance with EU CRA, NIS2, IEC 62443, Product Safety, RBA, and enterprise requirements Support audit readiness and compliance acti vities, including documentation, evidence validation, and tool updates (e.g., One Trust), aligned to internal and external audit expectations Manage and maintain program portfolio governa nce across multiple domains, ensuring alignment, prioritization, and execution of key risk and compliance initiatives through standardized workflows Own task and capacity management by creating, assigning, and tracking actions in Jira (or similar tools), ensuring accountability, optimizing workload distribution, and enabling efficient execution of program deliverables Develop and maintain dashboards, metrics, and reporting to support governance, leadership updates, and QBR reviews, enabling data-driven decision-making Conduct workshops, webinar, training, and awareness sessions to strengthen security and compliance adoption across the supplier ecosystem Drive continuous improvement of TPRC processes, tools, and governance frameworks to enhance scalability and effectiveness in a global environment Own and support Secure Development Lifecycle (SDL) expectations across suppliers; assess adoption, perform audits, and drive continuous improvement Ensure third-party software, firmware, and solutions meet defined security, quality, and compliance standards Develop and enhance secure supply chain program content , effectively engaging internal and external stakeholders (Bachelor's degree in electrical or Electronics Engineering, Computer Science, or related field. 5+ years in roles on Systems Engineering / Software Quality Assurance/ Software Engineer Minimum 5+ years' in auditing companies on software development lifecycle Have certification and practical experience with Secure Development Lifecycle (SDL) standards and implementation. Additionally, you should have demonstrated expertise in one or more industry frameworks. These include NIST 800-218: SSDF, IEC 62443-4-1, ISO 12207, CMMI, ASPICE, ISO 21434, ISO/IEC 9126, and ISO 27001. Experience in QA tools, methodologies, and continuous improvement Certification in LEAN, Six SIGMA tools and methodologies (i.e., Green Belt / Black Belt). Education qualification B.E/ B.Tech or MBA The Preferred - You Might Also Have: Experience in Third-Party Risk Management (TPRM), including supplier onboarding, risk assessments, and remediation tracking Hands-on experience working with global suppliers/OEMs and managing compliance expectations Experience supporting regulatory compliance programmes (e.g., EU CRA, NIS2, IEC 62443, ISO 27001) Experience in audit readiness, evidence collection, and compliance tools (e.g., OneTrust or equivalent) Programme execution and PMO governance experience (planning, tracking, reporting, Jira or similar tools) Experience driving risk mitigation/remediation to closure across teams Experience conducting supplier workshops, awareness sessions, or external engagements

What We Offer: Our benefits package includes … Comprehensive mindfulness programmes with a premium membership to Calm Volunteer Paid Time off available after 6 months of employment for eligible employees Company volunteer and donation matching programme – Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation. Employee Assistance Program Personalised wellbeing programmes through our OnTrack programme On-demand digital course library for professional development ... and other local benefits!

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-Hybrid #LI-SK2

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.