Staff, Third Party Risk Management (AI)

Location: Hybrid role based in Bellevue, Washington; Chicago, Illinois; New York, New York; San Francisco, California; Seattle, Washington; or Washington, DC.

Salary: $166,000–$228,000 USD annual base salary for candidates in California excluding the San Francisco Bay Area, Colorado, Illinois, New York, and Washington; $148,000–$204,000 USD annual base salary for other listed locations. Equity, bonus, and benefits may also apply.

Company

Okta builds identity and security infrastructure for organizations, including infrastructure that enables the secure adoption of AI.

What you will do

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Engineer AI agents, Python/API scripts, automated workflows, and data analytics for the third-party risk management lifecycle.
• Analyze integration, technical, supply-chain, and potential blast-radius risks, then drive remediation with suppliers and internal stakeholders.
• Design third-party reviews, continuous vendor monitoring, event-driven reassessments, and onboarding and offboarding workflows.
• Develop KRIs, KPIs, standardized assessment methodologies, playbooks, and procedures for executive reporting.
• Drive third-party risk program maturity and support security, GRC, and program enhancement initiatives.

Requirements

• Relevant BA/BS degree.
• 7+ years of experience conducting third-party security assessments across regulations and frameworks such as ISO 27001, PCI, NIST, or other relevant global security frameworks.
• Hands-on experience building automated workflows and scripts using Python and APIs, as well as AI agentic solutions.
• Ability to analyze third-party security artifacts, certifications, and technical reports, including SOC 2 Type II, ISO 27001, FedRAMP, and SIG.
• Ability to communicate effectively with internal and external stakeholders and balance security requirements with business priorities.
• Hands-on experience with GRC and TPRM platforms and solutions.
• Deep understanding of foundational security principles and methodologies, including logging, data handling, authorization, and authentication.
• Excellent verbal, written, and interpersonal skills; ability to manage multiple priorities, meet tight timelines, work through ambiguity, and adapt to changing environments.

Culture & Benefits

• Hybrid work with an immersive in-person onboarding experience.
• Health, dental, and vision insurance.
• 401(k), flexible spending account, paid leave, PTO, and parental leave.
• Equity and bonus opportunities where applicable.
• Focus on well-being, social impact, talent development, connection, and community.

Hiring process

• In-person onboarding is provided at the start of the role.