Staff, Third Party Risk Management

The role

This person will lead complex third-party security assessments and drive technical automation across the TPRM lifecycle. They will analyze technical risks, drive risk remediation, and develop data analytics workflows to support the TPRM program.

What you will do

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows.
• Analyze technical and integration risks to establish supply-chain risk visibility and evaluate potential blast radius.
• Drive risk remediation with third parties and internal stakeholders.
• Develop and maintain strong relationships with global cross functional stakeholders and third party suppliers.
• Partner with cross-functional teams to streamline and optimize third-party onboarding and offboarding workflows.
• Design and execute third-party review activities, continuous vendor monitoring, and event-driven re-assessments.
• Develop data analytics workflows and establish KRIs and KPIs.
• Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures.
• Drive TPRM program maturity and execution.

Required qualifications

• Relevant BA/BS degree.
• 7+ years of working experience conducting security assessments on Third Parties across regulations and common industry frameworks including ISO 27001, PCI, NIST or other global relevant security frame
• Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions.
• Strong ability to analyze and interpret third-party security artifacts, certifications, and technical reports (e.g., SOC 2 Type II, ISO 27001, FedRAMP, SIG).
• Ability to effectively communicate with both internal and external stakeholders.
• Hands-on experience of GRC and TPRM platforms and solutions.
• Deep understanding of foundational security principles, standard methodologies (i.e. logging, data handling, authorization, authentication).
• Excellent verbal, written, and interpersonal skills.
• Ability to manage multiple priority initiatives and deliver results under tight timelines.
• Comfortable with ambiguity and adaptable to fast changing environments.

Benefits

• Equity (where applicable)
• Bonus
• Health, dental and vision insurance
• 401(k)
• Flexible spending account
• Paid leave (including PTO and parental leave)

About the company

Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era.