Lead Third Party Risk Management

Position: Lead Third Party Risk Management at Replit
Join Replit as a Lead for Third Party Risk Management, focusing on substantive evaluations and true risk profiles. Collaborate with teams across Legal, Engineering, and Product to enhance security.

In this pivotal role, you'll oversee Security Vendor Risk and Contract Reviews, architecting a robust risk management program. Your expertise in evaluating SOC 2 documentation and security assessments will be crucial in determining actual vendor risk. Engage closely with the Legal team to negotiate essential contractual protections and maintain a comprehensive risk register.

Key Responsibilities:

• Evaluate third‑party risk beyond mere checklists

• Analyze SOC 2 reports and architecture documentation

• Collaborate with Legal on vendor and AI contracts

• Recommend security language changes in contracts

• Maintain records of vendor and AI model risks

Requirements:

• 8+ years in vendor risk management or related GRC role

• Ability to assess vendor risk independently

• Familiarity with GDPR and CCPA fundamentals

• Strong collaboration skills across departments

• Experience in building scalable vendor review processes

Become a key player in enhancing Replit’s security and risk evaluation strategies.
#J-18808-Ljbffr