Senior Manager, Vendor Security

Overview

Adobe Product and Software Security is looking for a leader to oversee its Vendor Security Program. As Senior Manager, Vendor Security, you’ll manage a team of security experts who conduct detailed vendor security assessments, identify risks, suggest mitigation controls, and help guide the company in making risk‑aware decisions.

• Lead a team of analysts and engineers to build, develop, and continually improve Adobe’s framework for managing security risks associated with vendors.
• Serve as the main interface between the Security team and the broader organization on matters related to vendors.
• Perform comprehensive, evidence‑based security assessments of third parties, including evaluation of architectures, configurations, controls, and operational practices to validate vendors’ real‑world security posture.
• Assess and manage security risks across a diverse vendor landscape, including SaaS providers, cloud and infrastructure partners, and other strategic or high‑impact suppliers.
• Clearly communicate identified gaps and recommend solutions or compensating controls to business owners and various leadership stakeholders.
• Coordinate vendor security risk decisions and procedures to address blocking issues, including detailed records of risk acceptance, mitigation strategies, and executive approvals when security requirements cannot be fully fulfilled.
• Collaborate with legal teams to ensure that security requirements are integrated into all contracts.
• Foster and maintain collaborative partnerships with various groups within Security, TPRM, Procurement, Legal, and Threat Intelligence to improve processes and workflow integrations for enhanced customer experience.
• Apply industry guidelines for risk analysis and stay informed about emerging trends and threats through continuous intelligence gathering.
• Implement real‑time monitoring and alerting for all critical vendors.
• Develop procedures to address and remediate vulnerabilities identified in vendor systems.
• Streamline and automate vendor security processes to increase operational efficiency and reduce manual workload.

• Bachelor’s or advanced degree in Computer Science, Engineering, Cybersecurity, or a related field.
• Minimum 10 years of security experience with at least 3 years in a leadership role.
• Demonstrable ability to conduct third‑party/vendor security assessments, including building and scaling vendor management programs.
• Strong knowledge of security principles and controls, such as data protection, access management, application security, identity and access management.
• Advanced technical and analytical skills; skilled in identifying and assessing risks from external incidents and breaches.
• Passion for integrating AI technologies into solutions.
• Experience with compliance frameworks like SOC 2, ISO 27001, and PCI DSS.
• Demonstrated success in client‑facing roles.
• Self‑motivated, accountable, adaptable, and focused under pressure.
• Good interpersonal and communication skills.

Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic.

The U.S. pay range for this position is $150,700 – $306,625 annually. Pay within this range varies by work location and may also depend on job‑related knowledge, skills, and experience. In California, the pay range for this position is $211,800 - $306,625.