Security Compliance Strategist, Vendor Security
Core
Build tools and workflows to standardize vendor assessments, automate evidence tracking, and reduce manual overhead in third-party risk management.
Role type
Security Compliance Strategist (Vendor Security) with software engineering focus
Builds
Automated workflows for vendor assessment intake, evidence tracking, and reporting
Domain
Information Security / Third-Party Risk Management (TPRM)
Required skills
Software development, automation, Python/Bash scripting, API integration, structured data formats, core security controls, analytical reporting
Preferred skills
GRC platforms, vendor risk assessments (SOC 2, ISO), document processing, ISO/IEC 27001, NIST, PCI DSS, cloud security, AI vendor reviews
Technologies
Python, Bash, APIs, GRC platforms
Responsibilities
Translate stakeholder needs into data and workflow requirements, review vendor questionnaires and security evidence against security requirements, build and maintain automations for data validation and reporting, map and integrate risk data from internal sources, support AI vendor reviews, coordinate evidence requests with vendors and stakeholders
Seniority
Junior to Mid-level, hands-on IC
