Senior Third-Party Risk & Security Lead

Deel; Oman; Remote; OMR 46,000 - 69,000; Full time

Benefits offered by this job

Stock grant opportunities

Flexible working office membership

Job summary

Deel is seeking a skilled Third-Party Risk Manager to oversee vendor security assessments and risk scoring for our global platform. You will coordinate questionnaire lifecycle, remediation, and governance across procurement, legal, and engineering teams.

You will also lead incident response for vendor breaches, monitor KRIs, and help embed security requirements in contracts and SLAs, ensuring regulatory alignment and scalable risk management.

Qualifications

• 5+ years in Information Security with focus on Third-Party Risk Management or supply chain security.
• Experience with security questionnaires and vendor risk scoring methodologies.
• Strong understanding of compliance frameworks (SOC2, ISO 27001, GDPR, HIPAA).

Responsibilities

• Design and manage vendor security assessment workflows.
• Develop and maintain vendor risk scoring models and KRIs.
• Own the questionnaire lifecycle and remediation tracking.
• Negotiate security clauses in vendor contracts and SLAs.
• Lead incident response coordination for vendor breaches.
• Establish ongoing monitoring of active vendors and maintain audit trails.

Skills

Vendor risk assessment

Security questionnaires

KRIs tracking

AI risk management

Contract governance

GRC tooling

Tools

Panorays

OneTrust

Archer

Job description

Deel is seeking a skilled Third-Party Risk Manager to oversee vendor security assessments and risk scoring for our global platform. You will coordinate questionnaire lifecycle, remediation, and governance across procurement, legal, and engineering teams.

You will also lead incident response for vendor breaches, monitor KRIs, and help embed security requirements in contracts and SLAs, ensuring regulatory alignment and scalable risk management.