Remote Senior Third-Party Risk & Security Analyst

Courseific; United States; Remote; USD 111,000 - 167,000; Full time

Job summary

Samsara is seeking a Remote Third-Party Risk Management Analyst to own security risk assessments for critical vendors and partners. You will oversee tiering, onboarding, reassessments, and remediation while collaborating with Legal, Procurement, and system owners to enforce security standards.

You should be US-based (excluding SF Bay Area, NYC, and DC metros) with 5+ years in vendor risk, GRC, or information security.

Qualifications

• 5+ years of experience in third-party/vendor risk management, GRC, or information security compliance.
• Experience using automation, scripting, or low-code workflows to help scale a vendor risk program.
• Hands-on experience running vendor security assessments and administering a vendor tiering program.
• Experience partnering with Legal and Procurement on vendor contract security and privacy terms (e.g., Security addendums, DPAs, etc.).
• Must reside in the US, outside the San Francisco Bay Area, New York City, and Washington, D.C. metro areas.

Responsibilities

• Lead end-to-end third-party security risk assessments for Samsara's vendors and partners.
• Own the vendor reassessment cadence and track remediation of security gaps.
• Review vendor contracts and onboarding requests to ensure security requirements before go-live.
• Escalate unresolved vendor risk to Security leadership, legal, procurement, and business owners.
• Support internal and external audits of the vendor risk program (ISO, SOC, FedRAMP).
• Build and maintain metrics, dashboards, and reporting for leadership visibility.
• Support automation and AI-enabled tools in vendor risk workflows.
• Mentor junior TPRM resources to keep pace with innovation.
• Champion Samsara's cultural principles as we scale globally.

Skills

Vendor risk management

GRC

Automation

Scripting

Low-code workflows

Vendor security assessments

Contract security

Privacy terms

Tools

Vanta

ServiceNow

OneTrust

Archer

Job description

Samsara is seeking a Remote Third-Party Risk Management Analyst to own security risk assessments for critical vendors and partners. You will oversee tiering, onboarding, reassessments, and remediation while collaborating with Legal, Procurement, and system owners to enforce security standards.

You should be US-based (excluding SF Bay Area, NYC, and DC metros) with 5+ years in vendor risk, GRC, or information security.