Third Party Information Security Risk Management Specialist

Job description

the employer is an integrated payroll and HR platform for global teams. Our vision is to unleash global opportunities for every person, team and business. Designed for the way the world works today, the employer combines HRIS, payroll, compliance, benefits, performance, and equipment management into one seamless platform. With AI-powered tools and proprietary payroll infrastructure, the employer supports every type of worker in more than 150 countries · Helps companies scale smarter, faster, and more compliantly. Among the world's largest globally distributed companies, our team of 7,000 spans more than 100 countries, speaks 74 languages, and brings a connected, dynamic culture that drives continuous learning and innovation for our clients. Why should you be part of our success story? As the fastest-growing Software as a Service (SaaS) company in history, the employer is changing how global talent connects with world-class companies - breaking down the boundaries that have traditionally limited recruiting and hiring opportunities. We don't just build software, we create the infrastructure for the future of work, enabling a more diverse and inclusive global economy. In 2024 alone, we paid $11.2 billion to workers in nearly 100 currencies and provided health care and benefits to workers in 109 countries. · Ensuring that people are paid and protected, no matter where they are. Our Moment This is reflected in our achievements and customer satisfaction: CNBC Disruptor 50, Forbes Cloud 100, the employer Fast 500, and repeated recognition on Y Combinator's Best Companies list - all in all. K while maintaining an average rating of 4.83 out of 15,000 reviews across G2, Trustpilot, Captera, Apple, and Google. Your experience at the employer will serve as a career accelerator. At the forefront of the global work revolution, you'll tackle complex challenges that impact the working lives of millions of people. With our momentum · Backed by a $17.3B valuation and $1B Annual Recurring Revenue (ARR) in just over five years · You'll make a meaningful impact while building the expertise that makes you a sought-after leader in global business transformation. Key Areas of Expertise • Third Party Risk Assessment and Vendor Evaluation: Deep experience in conducting security surveys, reviewing certifications (SOC2, ISO 27001, etc.), and recording vendor risk profiles. • Practical experience and AI automation: This role includes responsibility for automating the processes you work on. • Compliance and Contract Management: Experience translating security and compliance requirements into vendor contracts, SLAs, and audit requirements. • SaaS security posture and AI risk management: Understand cloud service security, SaaS-specific vulnerabilities, and emerging AI vendor risks. • Working with soft TPRM tools like Panorays, OneTrust and others. • Providing security requirements for new system applications. Responsibilities • Vendor Risk Assessment and Understanding: Design and manage vendor security assessment workflow. Integrate security questionnaires (panoramic photos, etc.) into standardized assessments. Conduct in-depth security reviews of third-party SaaS providers and cloud vendors, and artificial intelligence services to identify risk profiles. • Risk scoring and metrics: Develop and maintain vendor risk scoring models aligned with organizational risk appetite. Track Key Risk Indicators (KRIs) for active vendors and escalate material changes in a vendor's security posture. • Compliance questionnaire management: Own the questionnaire lifecycle · Ingestion, response validation, treatment tracking, and integration into risk decision workflow. Make sure sellers' responses are accurate and supported by evidence. • Negotiating contracts and SLAs: Partnering with Procurement and Legal to include security requirements in vendor contracts. Negotiate security terms, data protection terms, audit rights, and incident notification obligations. • Supplier Incident and Breach Management: Monitor and resp

Requirements

• analyse financial risk
• analyse financial performance of a company
• integrate strategic foundation in daily performance
• advise on financial matters
• plan health and safety procedures
• follow company standards

Skills