Senior Third-Party Security Risk Lead

Webhosting; Austin (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

Cloudflare in Austin is hiring a Security Third Party Risk Management Lead. You will be the technical and operational leader for our Third Party Risk function, owning vendor and data center security reviews and mentoring Specialists as they deliver assessments at scale.

You will set the program's day-to-day operational bar, drive risk decisions, and coordinate with Procurement, Legal, Privacy, and Security to integrate vendor risk across the lifecycle.

Qualifications

• 8+ years in Security GRC.
• Hands-on end-to-end vendor risk program.
• Subject-matter expertise across ISO 27001, SOC 2, PCI, NIST 800-53.
• Proven mentoring of peers.
• Ability to influence cross-functional teams.

Responsibilities

• Own and drive the operational execution of the third party risk program.
• Serve as the subject matter expert for vendor security review methodology.
• Lead the vendor risk assessment process day to day.
• Identify inefficiencies and drive improvements at scale.
• Coordinate the team’s work to drive assessments and projects to completion.
• Provide technical guidance on assessment methodology and tooling.
• Make risk findings decisions and act as escalation point.
• Support security contract term negotiations with vendors.

Skills

Vendor risk

Security GRC

Mentoring

Cross-functional

Risk assessment

Job description

Cloudflare in Austin is hiring a Security Third Party Risk Management Lead. You will be the technical and operational leader for our Third Party Risk function, owning vendor and data center security reviews and mentoring Specialists as they deliver assessments at scale.

You will set the program's day-to-day operational bar, drive risk decisions, and coordinate with Procurement, Legal, Privacy, and Security to integrate vendor risk across the lifecycle.