Staff, Third Party Risk Management

Staff, Third Party Risk Management 

Responsibilities:

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows to integrate tool outputs, optimize risk data processing and scale operations.
• Analyze technical and integration risks to establish deeper supply-chain risk visibility and evaluate potential blast radius.
• Drive risk remediation with third parties and internal stakeholders, providing actionable guidance in alignment with Okta security standards.
• Develop and maintain strong relationships with global cross functional stakeholders and third party suppliers.
• Partner with cross-functional teams to streamline and optimize third-party onboarding and offboarding workflows.
• Design and execute third-party review activities, continuous vendor monitoring, and event-driven re-assessments.
• Develop data analytics workflows and establish KRIs and KPIs to elevate team metrics and executive reporting.
• Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures.
• Drive TPRM program maturity and execution, aligning third-party risk governance with the company’s goals and security strategy.
• Support ad hoc projects including program enhancements, security initiatives, and other GRC functions.

Requirements:

• Relevant BA/BS degree.
• 7+ years of working experience conducting security assessments on Third Parties across regulations and common industry frameworks including but not limited to ISO 27001, PCI, NIST or other global relevant security frameworks.
• Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions. 
• Strong ability to analyze and interpret third-party security artifacts, certifications, and technical reports (e.g., SOC 2 Type II, ISO 27001, FedRAMP, SIG).
• Ability to effectively communicate with both internal and external stakeholders, and ensure security requirements are understood and business needs are prioritized appropriately.
• Hands-on experience of GRC and TPRM platforms and solutions.
• Deep understanding of foundational security principles, standard methodologies (i.e. logging, data handling, authorization, authentication).
• Excellent verbal, written, and interpersonal skills.
• Ability to manage multiple priority initiatives and deliver results under tight timelines.
• Comfortable with ambiguity and adaptable to fast changing environments.

#LI-HYBRID 

P5638_3588709