AI-Driven Vendor Risk & Compliance Engineer

WebMD LLC; Newark (NJ); On-site; USD 82,000 - 97,000; Full time

Benefits offered by this job

Health Insurance

Paid Time Off

401(k) Retirement Plan

Life and Disability Insurance

Employee Assistance Program

Commuter Benefits

Job summary

WebMD LLC in the United States seeks a Vendor Risk & Compliance Engineer to enhance our vendor risk program using AI, aligning with NIST, HIPAA, and SOC 2.

You will lead end-to-end risk assessments, improve methodologies, own OneTrust reports, and partner with risk owners to drive real risk reduction while prioritizing practical controls. The role reports to the Sr. Director of Privacy and Compliance and offers a discretionary bonus.

Qualifications

• 4–6 years leading vendor and third‑party risk assessments (security, vendor, HIPAA, etc.)
• Strong, practical command of risk and control concepts and GRC frameworks — NIST RMF, NIST 800-53r5
• Experience building and maintaining organizational security risk metrics.
• Hands‑on experience with GRC / risk / compliance tooling (OneTrust, Archer).

Responsibilities

• Continuous improvement using AI into all aspects of vendor risk management
• Lead and independently prioritize a range of vendor security risk assessments — scoped by service type and integration profile (HIPAA, infrastructure, application)
• Coordinate vendor information risk activities across procurement, legal, and the business, including assessment criteria and re‑assessments
• Partner with risk owners to design and negotiate risk treatment plans that prioritize genuine risk reduction
• Lead vendor risk reviews in bi‑weekly management meetings to drive accountability for remediation
• Own risk reporting in OneTrust: ensure risk managers are tracking remediations, and develop and maintain KRIs and KPIs
• Build, maintain, and improve assessment methodology and questionnaires based on NIST 800-53r5 and the NIST RMF
• Embed security‑by‑design into projects and products to mitigate risk before it materializes
• Support internal assessments and external audits

Skills

AI Proficiency

Vendor risk assessments

GRC frameworks

Stakeholder communication

Cross-functional collaboration

Education

Bachelor's or advanced degree in Science/Engineering/IS/Cybersecurity

Tools

OneTrust

Archer

Job description

WebMD LLC in the United States seeks a Vendor Risk & Compliance Engineer to enhance our vendor risk program using AI, aligning with NIST, HIPAA, and SOC 2.

You will lead end-to-end risk assessments, improve methodologies, own OneTrust reports, and partner with risk owners to drive real risk reduction while prioritizing practical controls. The role reports to the Sr. Director of Privacy and Compliance and offers a discretionary bonus.