Vendor Security Technical Program Manager

📋 Description

• Own vendor security engagements from understanding the business need through scoping, assessment
• Understand vendor use cases, workflows, user journeys, data flows, identities, access
• Assess relevant architectures, configurations, controls, logs, and operational practices. Test
• Develop practical treatments, including changes to the operating model, data exposure, access
• Build reusable security patterns with clear applicability, safeguards, evidence requirements
• Work with Legal, Procurement, and vendors on security addenda. Evaluate proposed terms and

🎯 Requirements

• Have independently assessed consequential third-party, supply-chain, or comparable security risks
• Understand security principles and controls, including data protection, access management
• Know relevant frameworks and standards, including ISO 27001, NIST 800-53, and SOC 2, and can use
• Have translated security findings and requirements into practical contractual positions with Legal
• Have delivered useful products or workflow improvements, tested expected behavior and failure
• Can use Codex or comparable AI-assisted development tools to build, run, inspect, and test working