Security Third Party Risk Management Lead (Cybersecurity)

TL;DR

Security Third Party Risk Management Lead (Cybersecurity): Leading the technical and operational execution of the third-party risk function with an accent on vendor security reviews and data center assessments. Focus on refining risk treatment decisions, mentoring specialists, and implementing AI-driven workflows to scale the program.

Location: Austin, TX, US

Company

hirify.global builds one of the world's largest networks to protect and accelerate any Internet application online without hardware or software installation.

What you will do

• Drive operational execution of the third party risk management program, including vendor assessments and continuous monitoring.
• Act as the primary subject matter expert for vendor tiering, security review methodology, and risk treatment.
• Refine security policies and standards for various vendor engagements such as cloud, software, hardware, and data centers.
• Mentor and provide technical guidance to Third Party Risk Management Specialists on assessment methodology and best practices.
• Coordinate with Sourcing, Legal, Privacy, and Security teams throughout the vendor lifecycle from onboarding to offboarding.
• Design and implement GRC tools and AI-powered workflows to improve operational scalability.

Requirements

• 8+ years of experience in Security GRC.
• Deep expertise in operating end-to-end third party and vendor risk programs.
• Strong knowledge of security control frameworks: ISO 27001, SOC 2, PCI, and NIST 800-53.
• Experience with security contract terms and supporting vendor negotiations.
• Proven ability to mentor peers and lead coordination across cross-functional teams.
• Must be based in Austin, TX, US.

Culture & Benefits

• Mission-driven environment focused on building a better, free, and open Internet.
• Commitment to social impact through Project Galileo and the Athenian Project.
• Culture of iteration and curiosity, leveraging AI to accelerate delivery and improvement.
• Inclusive workplace emphasizing diversity and equal opportunity.
• Collaborative atmosphere that values builders who proactively solve complex Internet problems.