Primary Department: Universal Services
Primary Department Head/Elected Official: Sindhu Menon
Secondary Department: Choose an item.
Secondary Department Head/Elected Official:
Regular or Supplemental RCA: Regular RCA
Type of Request: Position
Project ID (if applicable):
Vendor/Entity Legal Name (if applicable):
MWBE Contracted Goal (if applicable):
MWBE Current Participation (if applicable):
Justification for 0% MWBE Participation Goal: Choose an item.
Grant Indirect Costs Rate (if applicable):
Justification for 0% Grant Indirect Costs Rate (if applicable): Choose an item.
Request Summary (Agenda Caption):
title
Request for approval of three positions effective March 7, 2026.
end
Background and Discussion:
Third-party risk management is a critical component of the organization's cybersecurity strategy. Over the past decade, cybersecurity risk associated with vendors and external partners has increased significantly, making strong governance, contract oversight, and compliance essential control points for risk mitigation.
The Chief role provides strategic leadership and governance for the contracts and third-party risk function, ensuring alignment with organizational priorities, regulatory requirements, and cybersecurity standards. This position establishes oversight, sets risk tolerance, drives consistency across procurement and contract processes, and elevates issues for executive awareness and decision-making.
Under the Chief's leadership, the Contracts Compliance Analysts execute the day-to-day operational responsibilities by ensuring Universal Services contracts and agreements comply with applicable laws, regulations, and internal policies. The Analysts monitor contract terms, performance metrics, compliance requirements, and third-party risk indicators, with a strong emphasis on cybersecurity exposure.
The Analysts also review and extract contract information, maintain the contract management database with a high degree of accuracy, and ser...
Click here for full text