Sr. Security Analyst, Third Party Risk Management
SpaceXAI builds frontier AI models and products including the Grok conversational assistant and a multimodal developer API.
Funding history
About SpaceXAI
SpaceXAI is a US-based AI company focused on accelerating scientific discovery and understanding the universe through reasoning, voice, image, video, and generative AI systems. Formerly xAI, it was acquired by SpaceX effective February 2, 2026, while continuing to operate the x.ai site and services.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the end-to-end third-party risk lifecycle, from intake and due diligence to monitoring and offboarding. You will design risk-tiering methodology, review SOC 2 and ISO reports, assess AI vendors, support contract security terms, run continuous monitoring, maintain the risk register, operate GRC platforms, and report on vendor risk posture.
Requirements
- Bachelor's degree in computer science, information security, cybersecurity, or engineering/STEM
- 5+ years of experience in third-party risk management, vendor security, cybersecurity GRC, IT audit, or security role with hands-on assessments
- May require occasional travel
- Must be a U.S. citizen or national, lawful permanent resident, refugee, or asylee, or eligible to obtain required authorizations (ITAR)
Responsibilities
- Own the end-to-end third-party risk lifecycle
- Design and maintain risk-tiering methodology and inherent risk questionnaire
- Conduct security, privacy, and business due diligence
- Review independent assurance reports such as SOC 2 and ISO 27001
- Translate findings into risk decisions and document risk exceptions
- Partner with Legal and Procurement on contract security terms
- Assess risk of AI vendors and AI-enabled services
- Oversee fourth parties and sub-processors
- Run continuous monitoring of vendors and lead response to vendor incidents
- Maintain the third-party risk register and track remediation
- Operate and extend GRC platforms and automate workflows
- Develop TPRM policies, standards, and runbooks and support audits
- Create reporting on vendor risk posture
Benefits
- Equity
- Medical, vision, and dental coverage
- 401(k) retirement plan
- Short & long-term disability insurance
- Life insurance
- Discounts and perks
