Remote Third-Party Risk Analyst – Security & GRC

Antler; United States; On-site; USD 111,000 - 167,000; Full time

Job summary

Samsara is seeking a motivated Third-Party Risk Management Analyst to own security risk assessments for critical vendors and partners. You will manage the full lifecycle from onboarding to reassessments, collaborating with Legal, Procurement, and system owners to ensure security standards are met before vendors go live.

The role is remote for US residents (excluding SF Bay, NYC, and DC metros) and offers a base salary with RSU opportunities.

Qualifications

• 5+ years in third-party/vendor risk management, GRC, or information security compliance.
• Experience using automation, scripting, or low-code workflows to scale a vendor risk program.
• Hands-on experience running vendor security assessments and administering a vendor tiering program.
• Experience partnering with Legal and Procurement on vendor contracts and privacy terms (e.g., Security addendums, DPAs).
• Must reside in the US, outside the San Francisco Bay Area, New York City, and Washington, D.C. metro areas.

Responsibilities

• Lead end-to-end third-party security risk assessments for Samsara's vendors and partners, and recommend risk ratings and tiering.
• Own the vendor reassessment cadence and track remediation of security gaps throughout the lifecycle.
• Review vendor contracts and onboarding requests to ensure security requirements are in place before a vendor goes live.
• Escalate unresolved vendor risk to Security leadership, legal, procurement, and business owners as necessary.
• Support audits of the vendor risk program (e.g., ISO, SOC, FedRAMP).
• Build and maintain metrics, dashboards, and reporting for Security leadership to monitor third-party risk.
• Assist the GRC team in adopting automation and AI-enabled tools in vendor risk workflows.
• Mentor junior TPRM resources to match pace of innovation in Samsara.
• Champion Samsara's cultural principles as we scale globally.

Skills

Vendor risk management

GRC

Information security

Automation / scripting

Contract security

Tools

Vanta

ServiceNow

OneTrust

Archer

Job description

Samsara is seeking a motivated Third-Party Risk Management Analyst to own security risk assessments for critical vendors and partners. You will manage the full lifecycle from onboarding to reassessments, collaborating with Legal, Procurement, and system owners to ensure security standards are met before vendors go live.

The role is remote for US residents (excluding SF Bay, NYC, and DC metros) and offers a base salary with RSU opportunities.