Vendor Security Manager

📋 Description

• Build and scale vendor security and TPRM program
• Conduct third-party risk assessments and reviews
• Streamline and automate vendor security workflows with tooling and AI
• Develop reporting, metrics, and dashboards for vendor security posture
• Own risk communication and escalation paths to stakeholders
• Partner with Procurement, Legal, Contracts, and Security on vendor agreements

🎯 Requirements

• Proven experience conducting third-party or supply chain security assessments
• Hands-on experience building or scaling a vendor security program
• Strong information security principles: data protection, access management
• Strong analytical skills for technical, tactical, strategic risks
• Familiarity with ISO 27001, NIST, and SOC 2; translate to controls
• Exceptional communication to technical and non-technical audiences

🎁 Benefits

• Experience with procurement or vendor tools (Zip, Coupa, Vanta, Drata)
• Familiarity with AI/ML vendor risk considerations
• Familiarity with AI risk frameworks (NIST AI RMF, OECD, ISO 42001)
• Experience using AI tools to automate and scale processes