Staff Security Engineer (Vendor Security Assurance)
Core
Identify, assess, and manage security risks from external vendors, services, and solutions to protect company assets and customer trust.
Role type
Staff Security Engineer (Vendor Security Assurance)
Builds
Third-Party Security Risk Management systems
Domain
E-commerce / Cybersecurity
Required skills
Application authentication, authorization, logging, API integration, Information security, IT, infrastructure, network, privacy & compliance, risk management, governance
Preferred skills
SaaS security posture management (SSPM), security architecture design, e-commerce and logistics business understanding, CISA, CISSP, ISO/IEC 27001
Technologies
SaaS, Generative AI, Outsourcing, Privacy & Compliance, Monitoring (logging), API integration
Responsibilities
Evaluate security policies, procedures, and controls for SaaS, Generative AI, outsourcing, and data processors; Manage security requirements including authentication, authorization, vulnerability configuration, privacy, compliance, and monitoring; Identify and mitigate vendor security risks; Develop and improve methodologies for external vendor security assessments based on new threats and regulatory changes
Seniority
Staff, hands-on IC
