Vendor Security Program Manager

Job Summary

Independently leading vendor-security engagements, the full-time Vendor Security Technical Program Manager will assess security risks, develop practical treatments, and build reusable security patterns while working remotely.

Key responsibilities

• Own vendor security engagements from assessment to implementation and reassessment as needed
• Understand vendor workflows and identify potential security risks, proposing effective mitigations
• Collaborate with Legal and Procurement to develop security addenda and evaluate contractual terms

Required qualifications

• Experience assessing third-party or supply-chain security risks and applying security principles
• Familiarity with frameworks and standards such as ISO 27001, NIST 800-53, and SOC 2
• Proven ability to translate security findings into actionable contractual positions
• Experience delivering cross-functional programs and adapting priorities for measurable outcomes
• Ability to use AI-assisted tools for building and testing security solutions