Vendor Security Management

Vendor Security Management

We have an urgent requirement for a Vendor Security Management professional with strong experience in Vendor Security, Third-Party Risk Management, Network Security, VPN, Firewall Administration, and Vulnerability Management.

Location:

Sunnyvale, CA / Austin, TX

Work Model:
Hybrid – 3 days onsite per week

Duration:
Long Term Contract Pay Rate: $70

Job Responsibilities

Vendor Security Management

• Own the end-to-end vendor security onboarding and deployment process, including initial risk assessment, security questionnaires, due diligence, approvals, contractual security requirements, access provisioning, and ongoing monitoring.
• Maintain and manage the vendor security register, including critical vendor information, security certifications such as SOC 2 and ISO 27001, insurance certificates, NDA/DPA agreements, penetration test reports, and compliance documentation.
• Define and enforce vendor access control policies based on least-privilege principles.
• Conduct periodic vendor security reviews, risk reassessments, and compliance audits.
• Manage vendor offboarding and ensure timely access revocation and completion of data-handling requirements.

Network Access & Connectivity

• Design, implement, and manage secure vendor connectivity solutions.
• Hands-on experience with Client-to-Site VPN and Site-to-Site VPN.
• Troubleshoot VPN connectivity issues, including tunnel negotiation failures, authentication errors, routing issues, latency, and performance problems.
• Define and enforce network segmentation policies for vendor access.
• Review and approve firewall rules, ACLs, and network security policies for vendor connections.
• Hands-on experience with Palo Alto, Cisco ASA, and/or Fortinet firewalls is highly preferred.

Vulnerability & Security Scanning

• Utilize vulnerability scanning tools such as Qualys, Tenable, or equivalent to assess vendor-connected environments.
• Define scanning scope and schedules for vendor environments.
• Track vulnerability remediation and ensure timely closure of findings.
• Analyze scan results, prepare reports, and escalate critical vulnerabilities to appropriate stakeholders and vendor contacts.

Must-Have Skills

• Strong experience in Vendor Security Management / Third-Party Security / Vendor Risk Management.
• Hands-on experience managing end-to-end vendor security onboarding and deployment.
• Strong understanding of IRQ / Information Risk Questionnaire processes.
• Hands-on production experience with Palo Alto, Cisco ASA, and/or Fortinet firewalls.
• Strong knowledge of Client-to-Site and Site-to-Site VPN.
• Strong network troubleshooting skills involving VPN, routing, authentication, connectivity, and provisioning.
• Hands-on experience with Qualys, Tenable, or similar vulnerability scanning tools.
• Strong understanding of network segmentation and least-privilege access.
• Excellent communication and stakeholder-management skills.