Senior Contract & Compliance Associate

Fortress Information Security LLC; Orlando (FL); Hybrid; USD 90,000 - 127,000; Full time

Benefits offered by this job

Remote and Hybrid work environment

Medical, dental, vision plans

401(k) match

Tuition and certification reimburse

Job summary

Fortress Information Security LLC is seeking a Senior Contract & Compliance Associate to lead end-to-end vendor contracting and third-party risk management. The role involves negotiating NDAs, MSAs, SOWs, SaaS/cloud agreements, and DPAs while coordinating with Security and stakeholders to protect contractual interests and ensure compliance.

The position supports a remote, cross-functional team with opportunities to drive cost savings, renewals management, and process improvements across

Qualifications

• 5+ years of contracts, procurement, compliance or related experience.
• Experience reviewing information security, data protection and risk provisions.
• Ability to manage multiple contracts and deadlines independently.

Responsibilities

• Manage vendor contracts end to end, negotiate pricing and terms.
• Review NDAs, MSAs, SOWs, SaaS/cloud agreements, DPAs and amendments.
• Collaborate with Security and stakeholders to address risk.
• Oversee renewals, obligations and key dates to prevent expirations.
• Maintain TPRM and subcontracting plan compliance records.

Skills

Contract management

Vendor negotiation

Third-party risk

Communication

Microsoft Office

AI tools usage

Education

Bachelor's degree

Tools

CRM

Contract management software

Workflow management

Job description

Position:Senior Contract & Compliance Associate

Location: Orlando HQ - Remote, FL

Job Id:706

# of Openings:1

Senior Contract & Compliance Associate

Location:Remote

Compensation: $89,501 - 127,186 per year, depending on experience and qualifications.

Employment Type: Full-Time

What you can expect as the Senior Contract & Compliance Specialist at Fortress...

The Senior Contract & Compliance Specialist independently manages procurement contracting activities and provides operational support for key components of Fortress's Third-Party Risk Management (TPRM) and subcontracting compliance programs. This role reviews and negotiates commercial agreements — including NDAs, MSAs, SOWs, SaaS and cloud agreements, DPAs, and amendments — using established playbooks and a delegation of authority matrix, while engaging Security and other subject matter experts when appropriate. Working collaboratively with stakeholders across the organization, this position plays a critical role in protecting Fortress's contractual and compliance interests, identifying cost savings, and ensuring operational continuity. For an experienced contracts professional, this is a compelling opportunity to take real ownership, expand expertise in third-party risk and compliance, and directly contribute to Fortress's success in a remote, cross-functional role.

Responsibilities Include:

• Manage assigned vendor contracting end to end, including negotiating pricing and commercial terms and reviewing and negotiating NDAs, MSAs, SOWs, SaaS and cloud agreements, order forms, DPAs, amendments, renewals, and other vendor agreements using established playbooks and the delegation of authority matrix
• Review and negotiate information security, data protection, confidentiality, insurance, liability, and other risk provisions within established parameters, engaging Security or other subject matter experts when appropriate.
• Negotiate commercial terms to protect Fortress's interests, identify opportunities for cost savings or avoidance, and appropriately elevate exceptions outside established authority.
• Proactively manage contract renewals, obligations, and key dates to prevent avoidable expirations, unfavorable renewals, and operational disruptions.
• Manage day-to-day TPRM operational activities, including vendor intake, initial risk determination, due diligence coordination, documentation, ongoing monitoring, and reassessments, ensuring requirements and timelines are met.
• Manage day-to-day subcontracting plan compliance, including documentation, tracking, deadlines, and reporting, in partnership with the Government Compliance Manager and other subject matter experts.
• Maintain accurate and timely contract, TPRM, and compliance records to support reporting, compliance, and audit readiness.
• Collaborate with business stakeholders throughout contract negotiations to understand business needs, evaluate proposed terms and tradeoffs, incorporate stakeholder feedback, and move agreements toward resolution; mentor junior team members and support additional contracting and compliance activities as business needs evolve.

Minimum Qualifications:

• 5+ years of relevant experience in contracts, procurement, compliance, third-party risk management, or a related function, including substantial hands-on experience independently reviewing and negotiating vendor contracts and NDAs and the ability to apply contracting experience across different agreement types.
• Experience reviewing and negotiating vendor contract provisions related to information security, data protection, confidentiality, and risk, with the judgment to recognize when Security or other subject matter expertise is required.
• Foundational knowledge of third-party risk management, vendor due diligence, and common information security concepts and terminology sufficient to support TPRM operations and effectively coordinate with Security and other subject matter experts; technical security assessment expertise is not required.
• Demonstrated ability to independently manage multiple contracts, renewals, compliance activities, and deadlines while exercising sound judgment and escalating appropriately.
• Excellent oral and written communication skills, including the ability to negotiate effectively with vendors and clearly communicate contract, risk, and compliance requirements to internal stakeholders.
• Proficiency with Microsoft Office Suite and experience with contract management, task/workflow management, CRM, or similar business systems.
• Proficiency using AI tools for professional work, including the ability to critically evaluate and validate AI-generated output before use.

Preferred Skills:

• Experience supporting the day-to-day operation of a TPRM program, including vendor intake, due diligence, monitoring, or reassessments.
• Knowledge of GSA subcontracting plan requirements or experience supporting subcontracting plan compliance.
• Current recognized TPRM certification; candidates without a certification will be expected to obtain one within six months of hire with Fortress sponsorship.

Education:

• Bachelors Degree or equivalent professional work experience required.

Employee Benefits:

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short- and long-term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires.

For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.