Senior TPRM Security Lead (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior TPRM Security Lead (Cybersecurity): Owning and maturing the third-party risk management program to ensure vendor compliance with security, privacy, and operational standards. Focus on building a scalable risk-based assessment framework, partnering cross-functionally to mitigate vendor lifecycle risks, and optimizing GRC tooling.
Location: Must be based in or able to work from Austin, Chicago, New York City, Salt Lake City, or San Francisco
Salary: $117,000 - $185,000 USD
Company
provides a Revenue AI Operating System that unifies data, insights, and workflows to help companies understand their customers and automate sales processes.
What you will do
- Own the end-to-end third-party risk lifecycle including intake, due diligence, and ongoing monitoring.
- Establish security baselines and controls to manage risk across the vendor portfolio.
- Apply a risk-based approach to tier vendors and scale due diligence efforts.
- Partner with Procurement and Legal to embed risk requirements into contracts and onboarding workflows.
- Maintain and enhance TPRM policies in alignment with SOC 2, ISO 27001, and privacy regulations.
- Optimize TPRM tooling and automation to scale the program as the business grows.
Requirements
- 7+ years of experience in TPRM, GRC, or information security.
- Strong knowledge of security frameworks like SOC 2, ISO 27001, and NIST.
- Proven ability to conduct vendor risk assessments and interpret security documentation.
- Experience with TPRM tooling such as Zip.
- Excellent cross-functional communication skills to translate risk into business terms.
- Must be authorized to work in the United States.
Nice to have
- Relevant certifications such as CTPRP, CISA, CISSP, or CRISC.
Culture & Benefits
- Comprehensive medical, dental, and vision insurance plans.
- 401(k) program with investment support.
- Flexible vacation time and company-wide recharge days.
- Wellbeing fund and mental health benefits including therapy and coaching.
- Education and learning stipend for professional development.
- Paid parental leave and work-from-home stipend.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →