InfoSec Third Party Risk Management (TPRM) Specialist

Stellenbeschreibung:

Overview

As a TPRM Specialist at Deel, you will lead and improve our vendor risk program across a global ecosystem. You will assess security posture, oversee questionnaire and contract governance, and drive remediation with cross-functional partners. Your work will shape risk decisions, audits, and compliance across SaaS, cloud, and AI providers. This role offers impact at scale within a fast-growing, inclusive tech company.

Leistungen / Benefits

Stock grant opportunities
Flexible working office membership
Additional country-based perks and benefits
Competitive total rewards program
Disability and accommodations support
Inclusive, equal-opportunity employer

Verantwortungsbereiche

Design and manage vendor security assessment workflows and integrate security questionnaires (Panorays, etc.)
Develop and maintain vendor risk scoring models and track KRIs
Own questionnaire lifecycle: intake, responses, remediation, and risk decision integration
Negotiate security clauses, data protection terms, audit rights, and incident notification obligations in contracts
Monitor and coordinate responses to vendor security incidents and breaches
Establish ongoing vendor monitoring through automated tools and re-assessments
Author and maintain TPRM policies and tiering frameworks aligned with SOC2, ISO 27001, GDPR
Collaborate with DevSecOps, procurement, legal, and business teams to implement risk findings across the organization
Produce executive vendor risk insights and remediation progress reports

Zentrale Anforderungen

5+ years in Information Security with at least 3 years in Third-Party Risk Management or supply chain security
Technical literacy in AI automation and SaaS/cloud architecture; knowledge of vendor security controls
Experience with security questionnaire frameworks (Panorays, OneTrust, Archer) and vendor risk scoring
Strong understanding of SOC2, ISO 27001, GDPR, HIPAA; ability to translate requirements into vendor terms
Contract and legal acumen; comfortable negotiating with legal and procurement
Analytical mindset with ability to assess complex vendor security postures and propose mitigations