Third-Party Risk Management Analyst
39 minutes agoSeniorSalary: 150K - 170KSan Mateo; New YorkHybridFull TimeCybersecurityJobs by Fireworks AI
Fireworks AIVisit Fireworks AI website
Fireworks AI operates an AI platform for production inference and training of open-source models.
Fireworks AI on X (Twitter)Fireworks AI on DiscordFireworks AI on GitHubFireworks AI on Documentation
San Mateo, United States
Funding history
About Fireworks AI
Fireworks AI provides serverless and dedicated model inference, model deployment, and supervised and reinforcement fine-tuning for developers and enterprises building AI applications.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own how vendors and subprocessors are evaluated, onboarded, and monitored. You'll triage vendor requests, perform security due diligence, partner on contracts, monitor vendors, track remediation, report on program health, and improve the program.
Requirements
- 3-5 years in third-party/vendor risk management, GRC, IT audit, or information security
- Hands-on vendor security assessment experience
- Familiarity with the TPRM lifecycle
- Working knowledge of SOC 2, ISO 27001/27701/42001, HIPAA, GDPR, NIST CSF
- Experience with a GRC or TPRM platform
- Comfort with cloud environments (AWS, GCP, Azure)
- Strong written communication
- Detail-oriented and organized
Responsibilities
- Run vendor intake and risk tiering
- Perform security due diligence on SOC 2, ISO, HIPAA, GDPR documentation and questionnaires
- Identify control gaps and drive risk acceptance decisions
- Partner with Legal and Procurement on DPAs, BAAs, and subprocessor terms
- Monitor vendors continuously and run reassessments
- Track remediation to closure and maintain the vendor inventory and risk register
- Report on program health
- Improve questionnaires, tiering criteria, workflows, and templates
- Work across teams to explain vendor risk
Benefits
- Equity