Senior Third-Party Risk & Security Analyst

SpaceXSI; Austin, New York, Palo Alto, Washington (TX, NY, CA, District of Columbia); On-site; USD 132,000 - 228,000; Full time

Benefits offered by this job

Equity

Medical & Dental

401(k) Plan

Job summary

SpaceXSI is seeking a Sr. Security Analyst for Third Party Risk Management in the United States. You will own the end-to-end vendor risk program across software, cloud, AI models, and professional services, coordinating with Legal, Procurement, and Engineering teams.

The role requires 5+ years in TPRM or related fields, hands-on assessments, and a strong grasp of cloud security and governance frameworks. The position offers growth in a fast-moving environment at SpaceXSI.

Qualifications

• 5+ years of experience in third-party risk management, vendor security, cybersecurity GRC, IT audit, or a role in security, with hands-on responsibility for assessments.

Responsibilities

• Own the end-to-end third-party risk lifecycle for vendors and partners across the company.
• Design and maintain the risk-tiering methodology and inherent risk questionnaire.
• Conduct security, privacy, and business due diligence with vendor security teams.
• Review SOC 1/SOC 2 Type II, ISO 27001, ISO 42001 certificates and related artifacts.
• Translate findings into risk decisions and document exceptions with rationale.

Skills

TPRM experience

GRC frameworks

Contract security terms

AI governance familiarity

Security ratings tools

Cloud/SaaS security

Vendor risk assessments

Education

Bachelor's degree in computer science, information security, cybersecurity, or engineering/STEM

Tools

Vanta

Drata

OneTrust

ServiceNow VRM

Archer

SecurityScorecard

BitSight

UpGuard

Job description

SpaceXSI is seeking a Sr. Security Analyst for Third Party Risk Management in the United States. You will own the end-to-end vendor risk program across software, cloud, AI models, and professional services, coordinating with Legal, Procurement, and Engineering teams.

The role requires 5+ years in TPRM or related fields, hands-on assessments, and a strong grasp of cloud security and governance frameworks. The position offers growth in a fast-moving environment at SpaceXSI.