Vendor Supply Chain Analyst

The role

You will build and maintain a shared vendor library by verifying AI-generated research. You will check findings against sources, resolve gaps, and provide feedback to improve the AI research pipeline.

What you will do

• Verify vendor research by checking AI-generated findings against saved sources
• Build and maintain the vendor library
• Research new SaaS vendors and resolve incomplete records
• Resolve source-access gaps by finding accessible sources or uploading documents
• Confirm public security claims like SSO availability and SOC 2 reports
• Measure accuracy and calibrate scoring by comparing computed scores with customer ratings
• Improve research quality by giving engineering actionable feedback
• Recommend criteria updates as vendor practices evolve
• Maintain defensible evidence traceable to saved sources
• Develop verification runbooks

Required qualifications

• Hands-on experience conducting vendor security due diligence or third-party security assessments
• Strong research skills
• Familiarity with SaaS security practices and public security, privacy, and compliance documentation
• Analytical mindset
• Clear written communication
• Careful documentation habits
• Self-starter mindset

Nice to have

• Experience evaluating AI-generated research or designing human review processes
• Experience measuring research accuracy, calibrating scoring systems, or building quality assurance processes
• A background in third-party risk, compliance, or security research
• Experience helping an early-stage startup grow from Seed to Series A or beyond
• Scripting or automation skills

Benefits

• Comprehensive health & wellness benefits
• 20 days PTO per year
• 8 floating holidays
• Remote work culture
• Team off-sites in stunning places (Amsterdam, Italy, etc)
• Competitive compensation & equity

Before you apply

• Oneleet participates in E-Verify to confirm employment eligibility for U.S.-based candidates
• This company uses automated technology, including AI-assisted tools, to assist in reviewing applications

About the company

Oneleet is building an all-in-one security and compliance platform. Their mission is to make effective cybersecurity painless.