Senior Contract & Compliance Associate

Fortress Information Security LLC; United States; Hybrid; USD 90,000 - 127,000; Full time

Benefits offered by this job

Remote and Hybrid working environment

Competitive pay structure

Medical, dental, vision plans

Company paid life insurance

Disability insurance

401(k) match

Paid Time Off

Parental Leave

Professional growth opportunities

Tuition and certification reimburse

Employee Referral Programs

Job summary

Fortress Information Security LLC is seeking a Senior Contract & Compliance Associate in Orlando, FL, with remote work options. You will independently manage procurement contracting, review NDAs, MSAs, SOWs, SaaS and DPAs, and support Fortress's third-party risk management program across the organization.

You will negotiate terms, ensure compliance, monitor renewals, and collaborate with security and business stakeholders. This role offers ownership, growth, and a remote-friendly environment.

Qualifications

• 5+ years in contracts, procurement, compliance, third-party risk management, or a related function with hands-on vendor contracting experience.
• Experience reviewing vendor contract provisions related to information security, data protection, and risk.
• Foundational knowledge of third‑party risk management and vendor due diligence.
• Ability to manage multiple contracts, renewals, and deadlines independently.
• Excellent written and verbal communication for vendor negotiations.

Responsibilities

• Manage vendor contracting end to end, including NDAs, MSAs, SOWs, SaaS and cloud agreements, order forms, DPAs, amendments, renewals, and other vendor agreements using established playbooks and the delegation of authority matrix.
• Review and negotiate information security, data protection, confidentiality, insurance, liability, and other risk provisions within established parameters, engaging Security or other subject matter experts when appropriate.
• Negotiate commercial terms to protect Fortress's interests, identify opportunities for cost savings or avoidance, and appropriately elevate exceptions outside established authority.
• Proactively manage contract renewals, obligations, and key dates to prevent avoidable expirations, unfavorable renewals, and operational disruptions.
• Manage day-to-day TPRM operational activities, including vendor intake, initial risk determination, due diligence coordination, documentation, ongoing monitoring, and reassessments, ensuring requirements and timelines are met.
• Manage day-to-day subcontracting plan compliance, including documentation, tracking, deadlines, and reporting, in partnership with the Government Compliance Manager and other subject matter experts.
• Maintain accurate and timely contract, TPRM, and compliance records to support reporting, compliance, and audit readiness.
• Collaborate with business stakeholders throughout contract negotiations to understand business needs, evaluate proposed terms and tradeoffs, incorporate stakeholder feedback, and move agreements toward resolution; mentor junior team members and support additional contracting and compliance activities as business needs evolve.

Skills

Vendor contracts

NDAs and MSAs

SOWs

Information security

Data protection

Risk management

Communication skills

Education

Bachelor's Degree or equivalent professional work experience

Tools

Microsoft Office Suite

Contract management systems

CRM systems

Job description

Open Positions at Fortress

Position: Senior Contract & Compliance Associate

Location: Orlando HQ - Remote, FL

Job Id: 706

# of Openings: 1

Compensation: $89,501 - 127,186 per year, depending on experience and qualifications.

Employment Type: Full-Time

The Senior Contract & Compliance Specialist independently manages procurement contracting activities and provides operational support for key components of Fortress's Third-Party Risk Management (TPRM) and subcontracting compliance programs. This role reviews and negotiates commercial agreements — including NDAs, MSAs, SOWs, SaaS and cloud agreements, DPAs, and amendments — using established playbooks and a delegation of authority matrix, while engaging Security and other subject matter experts when appropriate. Working collaboratively with stakeholders across the organization, this position plays a critical role in protecting Fortress's contractual and compliance interests, identifying cost savings, and ensuring operational continuity. For an experienced contracts professional, this is a compelling opportunity to take real ownership, expand expertise in third-party risk and compliance, and directly contribute to Fortress's success in a remote, cross-functional role.

Responsibilities Include:

• Manage assigned vendor contracting end to end, including negotiating pricing and commercial terms and reviewing and negotiating NDAs, MSAs, SOWs, SaaS and cloud agreements, order forms, DPAs, amendments, renewals, and other vendor agreements using established playbooks and the delegation of authority matrix
• Review and negotiate information security, data protection, confidentiality, insurance, liability, and other risk provisions within established parameters, engaging Security or other subject matter experts when appropriate.
• Negotiate commercial terms to protect Fortress's interests, identify opportunities for cost savings or avoidance, and appropriately elevate exceptions outside established authority.
• Proactively manage contract renewals, obligations, and key dates to prevent avoidable expirations, unfavorable renewals, and operational disruptions.
• Manage day-to-day TPRM operational activities, including vendor intake, initial risk determination, due diligence coordination, documentation, ongoing monitoring, and reassessments, ensuring requirements and timelines are met.
• Manage day-to-day subcontracting plan compliance, including documentation, tracking, deadlines, and reporting, in partnership with the Government Compliance Manager and other subject matter experts.
• Maintain accurate and timely contract, TPRM, and compliance records to support reporting, compliance, and audit readiness.
• Collaborate with business stakeholders throughout contract negotiations to understand business needs, evaluate proposed terms and tradeoffs, incorporate stakeholder feedback, and move agreements toward resolution; mentor junior team members and support additional contracting and compliance activities as business needs evolve.

Minimum Qualifications:

• 5+ years of relevant experience in contracts, procurement, compliance, third-party risk management, or a related function, including substantial hands-on experience independently reviewing and negotiating vendor contracts and NDAs and the ability to apply contracting experience across different agreement types.
• Experience reviewing and negotiating vendor contract provisions related to information security, data protection, confidentiality, and risk, with the judgment to recognize when Security or other subject matter expertise is required.
• Foundational knowledge of third-party risk management, vendor due diligence, and common information security concepts and terminology sufficient to support TPRM operations and effectively coordinate with Security and other subject matter experts; technical security assessment expertise is not required.
• Demonstrated ability to independently manage multiple contracts, renewals, compliance activities, and deadlines while exercising sound judgment and escalating appropriately.
• Excellent oral and written communication skills, including the ability to negotiate effectively with vendors and clearly communicate contract, risk, and compliance requirements to internal stakeholders.
• Proficiency with Microsoft Office Suite and experience with contract management, task/workflow management, CRM, or similar business systems.
• Proficiency using AI tools for professional work, including the ability to critically evaluate and validate AI-generated output before use.

Preferred Skills:

• Experience supporting the day‑to‑day operation of a TPRM program, including vendor intake, due diligence, monitoring, or reassessments.
• Knowledge of GSA subcontracting plan requirements or experience supporting subcontracting plan compliance.
• Current recognized TPRM certification; candidates without a certification will be expected to obtain one within six months of hire with Fortress sponsorship.

Education:

• Bachelor's Degree or equivalent professional work experience required.

Employee Benefits:

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short‑and‑long‑term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave

Employment Perks:

• We provide each employee with professional growth opportunities through succession planning, up‑skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E‑Verify process for all new hires.

For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case‑by‑case basis.

Pay Range: $89,501 - $127,186 per year