Supplier Security & Assurance, Security GRC

📋 Description

• Run supplier security assessments: review agent-prefilled outputs, evaluate vendor controls and
• Operate supplier issue management and risk treatment: document each finding with a severity, an
• Run continuous monitoring after approval: reopen an assessment on defined triggers (data
• Improve the program as you run it: identify gaps in coverage, questionnaires, requirements, and
• Tune and maintain our Claude-powered assessment platform alongside the team: prompt development
• Contribute to KPI and KRI reporting on coverage, cycle time, residual risk, open issues, and

🎯 Requirements

• Experience running supplier security assessments end to end at a technology company: scoping the
• Working knowledge of risk fundamentals (inherent and residual risk, control effectiveness
• Ability to assess a vendor across security domains, and to recognize which findings you can close
• Track record of driving risk treatment to closure through influence across teams with competing
• Experience building or tuning an LLM-backed workflow, agent, or automation in a risk, compliance
• Experience building or operating issue management workflows: logging issues with a clear owner and

🎁 Benefits

• Competitive compensation and benefits
• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• Lovely office space in which to collaborate with colleagues