Remote Vendor Risk & Compliance Analyst

NextGenEnergyJobs; Northern (KY); Hybrid; USD 111,000 - 167,000; Full time

Job summary

Samsara, in a remote-capable role for US-based candidates (excluding SF Bay Area, NYC, and DC), seeks a Senior Third-Party Risk Management Analyst. You will own security risk assessments for critical vendors and partners, partnering with Legal, Procurement, and system owners to ensure security terms are in place before go-live.

You will lead tiering, onboarding, reassessments, and remediation, while driving automation and AI-enabled workflows to improve processes and risk visibility for

Qualifications

• 5+ years in third-party/vendor risk management, GRC, or information security compliance.
• Experience automating vendor risk programs with scripting or low-code tools.
• Hands-on vendor security assessments and tiering programs.
• Collaboration with Legal and Procurement on security/privacy terms.

Responsibilities

• Lead end-to-end third-party security risk assessments for vendors and partners.
• Oversee the vendor risk lifecycle from onboarding to reassessments and remediation.
• Partner with Legal, Procurement, and system owners to review vendor contracts and onboarding requests.
• Escalate unresolved vendor risk to Security leadership as needed.
• Support audits (ISO, SOC, FedRAMP) and tooling in vendor workflows.
• Build metrics, dashboards, and reporting for Security leadership.

Skills

Vendor risk management

GRC

Information security

Automation / scripting / low-code

Vendor risk assessments

Contract security / privacy terms

NIST CSF / ISO 27001 / SOC 2

GRC platforms

Certifications: CTPRP, CISA, CRISC,/Ci

US residency

Job description

Samsara, in a remote-capable role for US-based candidates (excluding SF Bay Area, NYC, and DC), seeks a Senior Third-Party Risk Management Analyst. You will own security risk assessments for critical vendors and partners, partnering with Legal, Procurement, and system owners to ensure security terms are in place before go-live.

You will lead tiering, onboarding, reassessments, and remediation, while driving automation and AI-enabled workflows to improve processes and risk visibility for