Remote job
Security Risk Management Lead
Job details
About this role
Role overview Develop and lead an engineering-oriented security risk program focused on third-party relationships. The role combines risk assessment and policy design with hands-on automation, replacing manual governance workflows with scalable processes and tools while helping teams make informed, risk-based decisions.
Responsibilities - Improve third-party security processes, controls, and operational workflows. - Build automations for review intake, triage, evidence gathering, control checks, tracking, escalations, and reporting using Python, low-code platforms, or coding assistants. - Connect workflows across ticketing, risk, vendor management, identity, and cloud systems. - Work with procurement, legal, engineering, IT, compliance, privacy, and business teams to assess third-party risk. - Evaluate vendor controls, cloud architectures, integrations, and risk posture; communicate practical recommendations. - Set service expectations, metrics, dashboards, and reporting, and manage several complex reviews and improvement initiatives at once.
Requirements - At least five years of experience in information security, risk management, engineering, or a related area. - Practical experience with coding assistants and enough Python fluency to read, modify, and run scripts and deliver small automations. - Familiarity with AWS, GCP, or Azure, including identity and access management, logging, common services, and relevant security controls. - Strong written and verbal communication, including the ability to explain technical concerns to non-technical stakeholders. - Attention to detail and demonstrated ability to drive projects to completion.
Nice to have - Experience with security risk tooling and workflow automation; SQL, BI, or custom reporting tools are relevant. - Security or risk certification such as CISSP, CISM, CISA, or CRISC. - Degree in cybersecurity, computer science, or a related discipline, or equivalent experience.
Benefits and work setup - Remote-first role; visa sponsorship is unavailable. - Annual base pay range: $165,000–$225,000 in CA, WA, NY, NJ, and CT; $146,000–$206,000 in other US states. Total compensation may include equity, health and wellness stipends, and benefits; medical, dental, and vision premiums are covered for employees and dependents.