Remote Third-Party Risk & Compliance Analyst

Samsara; Northern (KY); Hybrid; USD 111,000 - 167,000; Full time

Benefits offered by this job

Flexible working model

Remote work options

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking a Senior Third-Party Risk Management Analyst to own security risk assessments for vendors and partners. You’ll manage the full lifecycle, collaborate with Legal and Procurement, and ensure security requirements are met before onboarding.

This remote role is open to US residents outside select metro areas. Ideal candidates bring 5+ years in TPRM/GRC, experience with risk frameworks (NIST/ISO/SOC), and familiarity with Vanta, ServiceNow, or OneTrust.

Qualifications

• 5+ years in third-party/vendor risk management, GRC, or information security compliance.
• Experience using automation, scripting, or low-code workflows to scale vendor risk programs.
• Hands-on experience running vendor security assessments and administering a vendor tiering program.
• Experience partnering with Legal and Procurement on vendor contracts and security/privacy terms.
• Must reside in the US, outside SF Bay Area, NYC Metro, and DC metro areas.

Responsibilities

• Lead end-to-end third-party security risk assessments and recommend risk ratings.
• Own vendor reassessment cadence and track remediation of security gaps.
• Review vendor contracts and onboarding requests to ensure security requirements before go-live.
• Escalate unresolved vendor risk to Security leadership, legal, and business owners.
• Support audits (ISO, SOC, FedRAMP) of the vendor risk program.
• Build dashboards and reports to show Samsara's third-party risk posture.
• Advise on automation and AI-enabled tools in vendor risk workflows.
• Mentor junior TPRM resources to keep pace with growth.
• Champion Samsara's cultural principles across the organization.

Skills

Vendor risk management

GRC

Information security

Automation scripting

Contract security

Education

CISA

CISSP

CRISC

CTPRP

Tools

Vanta

ServiceNow

OneTrust

Archer

Job description

Samsara is seeking a Senior Third-Party Risk Management Analyst to own security risk assessments for vendors and partners. You’ll manage the full lifecycle, collaborate with Legal and Procurement, and ensure security requirements are met before onboarding.

This remote role is open to US residents outside select metro areas. Ideal candidates bring 5+ years in TPRM/GRC, experience with risk frameworks (NIST/ISO/SOC), and familiarity with Vanta, ServiceNow, or OneTrust.