Remote Third-Party Risk & Vendor Security Analyst

samsara; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Fully remote within the US

Job summary

Samsara is seeking a Remote Third-Party Risk Management Analyst to own vendor security assessments and ongoing reassessments across the US, excluding select metros. You will partner with Legal, Procurement, and business stakeholders to ensure vendor security controls before go-live.

You will lead risk assessments, build dashboards for leadership, and help drive automation in risk workflows. A strong GRC background and collaboration skills are essential for success.

Qualifications

• Experience running security risk assessments for vendors and partners.
• Familiarity with ISO, SOC, and FedRAMP frameworks.
• Strong cross-functional collaboration with Legal, Procurement, and stakeholders.
• Ability to build dashboards and reports for security leadership.
• Experience managing multiple assessments and reassessments.

Responsibilities

• Lead end-to-end third-party security risk assessments and recommend risk ratings and tiering.
• Own the vendor reassessment cadence and track remediation of gaps.
• Review vendor contracts and onboarding requests to ensure security controls before go-live.
• Escalate unresolved vendor risk to Security leadership, Legal, Procurement, and owners.
• Support audits of the vendor risk program (ISO, SOC, FedRAMP).
• Build metrics, dashboards, and reporting for visibility into risk posture.
• Advance automation and AI-enabled tools in vendor risk workflows.
• Mentor junior TPRM team members to scale with growth.

Skills

Vendor risk assessments

GRC experience

Cross-functional collaboration

Security dashboards

AI / automation in risk

Job description

Samsara is seeking a Remote Third-Party Risk Management Analyst to own vendor security assessments and ongoing reassessments across the US, excluding select metros. You will partner with Legal, Procurement, and business stakeholders to ensure vendor security controls before go-live.

You will lead risk assessments, build dashboards for leadership, and help drive automation in risk workflows. A strong GRC background and collaboration skills are essential for success.