GRC Automation Specialist (Governance, Risk & Compliance, TPRM)

samsara; United States; Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Health coverage

Parental leave plans

Professional development stipend

Job summary

Samsara is seeking a Governance, Risk, and Compliance Automation Specialist to scale its third-party risk program. You will blend hands-on vendor risk assessments with designing automated workflows and partner with procurement, legal, privacy, and engineering to keep reviews fast, consistent, and audit-ready as the company grows.

In this role you will implement and refine automation across the TPRM program, contribute to risk registers and control mappings, and coordinate with auditors and

Qualifications

• 2–4 years in governance, risk and compliance.
• Experience implementing or maintaining a vendor-risk program.
• Hands-on security and maturity assessments of vendors/systems.
• Familiarity with risk registers, compliance inventories, and control mappings.

Responsibilities

• Deliver programmatic updates on third-party, program, and technical risk to senior InfoSec leadership.
• Build and refine automation across the TPRM program, including AI-enabled workflows.
• Partner with Procurement, Legal, and Privacy to manage vendor risk across the lifecycle.
• Collaborate with systems owners to implement security controls across multiple tools.
• Contribute to risk registers, compliance inventories, and control-mapping artifacts.
• Coordinate with auditors, internal engineering, and stakeholders on procurement reviews.

Skills

Governance

Risk management

Vendor risk

Security assessments

Automation

Collaboration

Tools

GRC platforms

Automation tools

Vendor-risk platforms

Job description

Role overview

The Governance, Risk, and Compliance Automation Specialist helps a fast-growing technology organization scale its Third-Party Risk Management (TPRM) program. The role blends hands-on third-party risk assessment with the design of automated workflows, partnering closely with procurement, legal, privacy, and engineering counterparts to keep vendor reviews fast, consistent, and audit-ready as the company expands.

Responsibilities

• Deliver programmatic updates and surface third-party, program, and technical risk to senior Information Security leadership on a recurring basis
• Build and refine automation across the TPRM program, including AI-enabled review workflows and integrations with vendor-risk platforms and native tooling, so security reviews and reassessments keep pace with company growth
• Partner with Procurement, Legal, and Privacy teams to identify, document, and mitigate vendor risk throughout the full vendor lifecycle, from intake through offboarding
• Collaborate with systems owners to implement and tune security controls across a diverse stack of business and internal tools
• Contribute to risk registers, compliance inventories, and control-mapping artifacts that span internal systems and external vendor relationships
• Coordinate with external auditors, internal engineering teams, business stakeholders, and security operations on procurement-related reviews and evidence requests

Requirements

• Two to four years of professional experience in governance, risk, and compliance
• Demonstrated experience implementing or maintaining a vendor-risk or third-party risk management program
• Hands-on experience performing security and maturity assessments of vendors or systems
• Familiarity with building or maintaining risk registers, compliance inventories, and control mappings across internal and external systems
• Ability to work collaboratively with engineers and systems owners to apply security controls across platforms such as identity providers, collaboration suites, CRM systems, and internal tooling

Nice to have

• Experience using third-party GRC platforms (for example, workflow orchestration or continuous-monitoring tools) alongside custom or native automation solutions
• Exposure to AI-enabled workflow design for scaling review programs

Benefits and work setup

• Flexible working model with in-office, hybrid, and remote options depending on team and operational needs
• Comprehensive health coverage and parental leave plans
• Professional development stipend to support ongoing learning and certification