Vendor Supply Chain Analyst (Cybersecurity)

Location: Remote; global hiring through direct employment or an employer-of-record partner, where legally available.

Salary: $60,000–$80,000 annual base salary, with equity and benefits excluded from the range. Compensation is benchmarked by work location.

Company

hirify.global is a cybersecurity and compliance platform helping companies build, manage, and monitor security programs and achieve standards such as SOC 2 and ISO 27001.

What you will do

• Verify AI-generated vendor research against saved sources, correct unsupported claims, and distinguish confirmed findings from missing or inconclusive evidence.
• Build and maintain the shared vendor library by researching SaaS vendors, resolving incomplete records, and reviewing significant changes such as breaches and changes to security practices.
• Resolve source-access gaps by finding accessible evidence or manually uploading available documentation.
• Verify public security claims including SSO availability, published DPAs, subprocessor lists, and SOC 2 report availability.
• Measure research accuracy, compare computed scores with customer-assigned ratings, investigate discrepancies, and recommend evidence-based scoring adjustments.
• Document recurring errors, improve evaluation criteria, provide actionable feedback to engineering, maintain traceable evidence, and develop verification runbooks.

Requirements

• Hands-on experience conducting vendor security due diligence or third-party security assessments.
• Strong research skills and the judgment to distinguish evidence from marketing claims.
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation.
• An analytical mindset and comfort investigating discrepancies, documenting uncertainty, and checking whether scores reflect the underlying evidence.
• Clear written communication and careful documentation habits.
• A self-starter mindset with initiative, adaptability, comfort with ambiguity, and an interest in building processes from scratch.

Nice to have

• Experience evaluating AI-generated research or designing human review processes.
• Experience measuring research accuracy, calibrating scoring systems, or building quality assurance processes.
• Background in third-party risk, compliance, or security research.
• Experience helping an early-stage startup grow from Seed to Series A or beyond.
• Scripting or automation skills for analyzing results or improving verification efficiency.

Culture & Benefits

• Remote-first work culture with global hiring where legally possible.
• Autonomy, personal accountability, and an emphasis on impact over titles.
• Comprehensive health and wellness benefits.
• 20 days of paid time off per year plus 8 floating holidays.
• Team off-sites, including in Amsterdam and Italy.
• Competitive compensation and equity.