Remote Vendor Security Program Manager

Ladders; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible work environment

Professional development

Collaborative team culture

Cutting-edge technology and tools

Health and wellness programs

Job summary

Ladders is assisting a client in seeking a Vendor Security Technical Program Manager to lead third-party risk programs across the organization. You will partner with Security, Legal and Procurement to translate technical findings into contractual requirements and scalable controls.

This remote role (US-based) focuses on building reusable security patterns, defining success measures, and driving cross-functional execution to strengthen the company’s vendor ecosystem.

Qualifications

• 5–7 years of experience in vendor security or related fields.
• Strong understanding of security principles and controls.
• Familiarity with ISO 27001, NIST 800-53, and SOC 2.
• Proven ability to translate security findings into contractual terms.
• Experience with AI-assisted development tools.
• Demonstrated success in delivering cross-functional programs.
• Excellent communication skills for complex security issues.

Responsibilities

• Lead vendor security engagements from initial assessment through reassessment.
• Analyze vendor use cases, workflows, and data flows.
• Evaluate architectures and operational practices for security gaps.
• Develop and implement practical security treatments.
• Create reusable security patterns with clear guidelines.
• Collaborate with Legal and Procurement on security addenda.
• Define requirements and success measures for security programs.
• Drive delivery across Security and partner teams.

Skills

Vendor security

Security controls

ISO 27001

NIST 800-53

SOC 2

Contract negotiation

Cross-functional leadership

AI-assisted tools

Tools

AI tooling

Job description

Ladders is assisting a client in seeking a Vendor Security Technical Program Manager to lead third-party risk programs across the organization. You will partner with Security, Legal and Procurement to translate technical findings into contractual requirements and scalable controls.

This remote role (US-based) focuses on building reusable security patterns, defining success measures, and driving cross-functional execution to strengthen the company’s vendor ecosystem.