Supplier Security & Assurance, Security GRC
Core
Assessing the security of suppliers for a frontier AI lab by evaluating vendor controls, determining risk, and driving remediation.
Role type
Senior Security GRC specialist (Supplier Security & Assurance)
Builds
End-to-end supplier security assessment program and agent-powered evaluation workflows
Domain
AI safety, vendor risk management, and security governance
Deliverable
Production ML models | product features
Required skills
Supplier security assessment, risk fundamentals (inherent/residual), issue management workflows, LLM/agent workflow tuning, SaaS security configuration, vendor contract terms analysis, SOC 2 report interpretation
Preferred skills
Cloud infrastructure assessment, SOX/SOC 2/ISO 27001 experience, specialized vendor cohort assessment (compute/data centers), continuous monitoring and drift detection
Technologies
Claude-powered assessment platform, SaaS configuration tools, risk management systems
Responsibilities
Run end-to-end supplier security assessments, manage supplier issue remediation, execute continuous monitoring post-approval, improve assessment program and tooling, tune LLM-backed assessment workflows, contribute to KPI reporting
Seniority
Senior, hands-on IC
