Third Party Risk Management and Customer Trust Lead

📋 Description

• Run substantive third-party risk management (TPRM), evaluating real risk
• Review SOC 2 reports, pen tests, and architecture docs for vendor risk
• Partner with Legal on vendor/AI contracts, including DPAs and subprocessor terms
• Review contracts for non-standard security language and suggest redlines
• Maintain the vendor and AI/model risk registers and feed findings to risk org
• Enable sales by maturing the customer trust program

🎯 Requirements

• 8+ years in third-party/vendor risk management, security risk, or a related GRC role
• Independently assess vendor risk; fluent in SOC 2, ISO, pen tests, and architecture docs
• Experience reviewing/redlining security and data contract language with legal team
• Working knowledge of GDPR/CCPA data privacy in vendor/subprocessor relations
• Strong cross-functional collaboration with Legal, Engineering, Product, and Sales
• Experience building repeatable, scalable vendor review processes

🎁 Benefits

• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays
• Commuter Benefits (In-Office Only)
• Monthly Wellness Stipend