AI-Driven Third-Party Ecosystem Security Analyst

United States Digital Space LLC; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC is seeking an experienced Security GRC professional to lead end-to-end vendor risk assessments and govern third-party security posture across onboarding and ongoing relationships.

You will mature the risk program with scalable questionnaires, tiering, and AI-powered workflows, while collaborating across Security, Legal, Procurement, and GTM to ensure a robust control environment.

Qualifications

• 4+ years of experience in vendor risk management.
• Experience running security risk assessments of third parties—SOC 2 and ISO reports.
• Familiarity with the third-party risk lifecycle: intake, tiering, exceptions, remediation.
• Security and compliance knowledge: SOC 2, ISO 27001, NIST CSF.
• Ability to read a control environment and identify real gaps.
• Program maturation: improving tiering, questionnaires, workflow, automation.
• Track record of high-volume assessments with rigor intact.
• Strong written and verbal communication across functions.
• AI tooling experience to improve assessment review and reporting.

Responsibilities

• Run Vendor Security Risk Assessments: triage inbound vendor requests, rate risk, document findings and exceptions.
• Vet Customer and Partner Security Posture: review onboarding security practices to protect data.
• Keep the Third-Party Risk Lifecycle Current: manage tiering, reassessments, remediation tracking, risk register.
• Mature the Program: improve questionnaires, tiering criteria, intake, and tooling for scalability.
• Report on Ecosystem Risk: track cycle times, backlog, open exceptions, and program health.
• Scale Through AI and Tooling: build AI-assisted workflows for assessment review and reporting.

Tools

OneTrust

ProcessUnity

Whistic

SecurityScorecard

Job description

United States Digital Space LLC is seeking an experienced Security GRC professional to lead end-to-end vendor risk assessments and govern third-party security posture across onboarding and ongoing relationships.

You will mature the risk program with scalable questionnaires, tiering, and AI-powered workflows, while collaborating across Security, Legal, Procurement, and GTM to ensure a robust control environment.