GRC Automation Specialist (Governance, Risk & Compliance, TPRM)

Role overview The Governance, Risk, and Compliance Automation Specialist helps a fast-growing technology organization scale its Third-Party Risk Management (TPRM) program. The role blends hands-on third-party risk assessment with the design of automated workflows, partnering closely with procurement, legal, privacy, and engineering counterparts to keep vendor reviews fast, consistent, and audit-ready as the company expands.

Responsibilities - Deliver programmatic updates and surface third-party, program, and technical risk to senior Information Security leadership on a recurring basis - Build and refine automation across the TPRM program, including AI-enabled review workflows and integrations with vendor-risk platforms and native tooling, so security reviews and reassessments keep pace with company growth - Partner with Procurement, Legal, and Privacy teams to identify, document, and mitigate vendor risk throughout the full vendor lifecycle, from intake through offboarding - Collaborate with systems owners to implement and tune security controls across a diverse stack of business and internal tools - Contribute to risk registers, compliance inventories, and control-mapping artifacts that span internal systems and external vendor relationships - Coordinate with external auditors, internal engineering teams, business stakeholders, and security operations on procurement-related reviews and evidence requests

Requirements - Two to four years of professional experience in governance, risk, and compliance - Demonstrated experience implementing or maintaining a vendor-risk or third-party risk management program - Hands-on experience performing security and maturity assessments of vendors or systems - Familiarity with building or maintaining risk registers, compliance inventories, and control mappings across internal and external systems - Ability to work collaboratively with engineers and systems owners to apply security controls across platforms such as identity providers, collaboration suites, CRM systems, and internal tooling

Nice to have - Experience using third-party GRC platforms (for example, workflow orchestration or continuous-monitoring tools) alongside custom or native automation solutions - Exposure to AI-enabled workflow design for scaling review programs

Benefits and work setup - Flexible working model with in-office, hybrid, and remote options depending on team and operational needs - Comprehensive health coverage and parental leave plans - Professional development stipend to support ongoing learning and certification