Description
We are looking for an Information Security Senior Associate, Vendor Risk & Security to join our team. As an Information Security Senior Associate, Vendor Risk & Security, your job responsibilities will include:
- Triage and track Third-Party Security Assessment (TPSA/TPSD) cases in ProcessUnity from intake to closure, including supplier follow-up questions.
- Do first-pass review of supplier questionnaire responses against a documented rubric, and escalate exceptions to the senior reviewer.
- Support subprocessor security reviews with documentation review and status tracking.
- Collect and organize evidence for audit readiness.
- Maintain intake hygiene in ProcessUnity: bulk imports of new supplier TPSAs, templates and intake fields for new supplier categories, and consistency across cases.
- Chase outstanding evidence and documentation from vendors and internal stakeholders.
- Help with adjacent vendor compliance work, such as BPO questionnaire follow-ups and security-training content.
You will be working in an engineering-first culture, using version control, code review, CI/CD, and backlogs. You will be automating manual processes, and measuring risk reduced, effort saved, and audit friction removed.
The ideal candidate will have:
- Interest in third-party risk, vendor security, or security compliance.
- Strong written communication.
- Attention to detail when reading questionnaire answers line by line.
- Ability to manage many open cases and deadlines without dropping follow-ups.
- Willingness to escalate when an answer looks wrong or incomplete.
- Experience with a GRC or case-management tool (ProcessUnity or similar).
- Familiarity with security questionnaires or frameworks (SIG, CAIQ, SOC 2, ISO 27001).
- Prior audit-support or compliance-coordination experience.