Senior TPRM Security Analyst - Equity & PTO

VulnU; Austin, New York, Palo Alto, Washington (TX, NY, CA, District of Columbia); On-site; USD 132,000 - 228,000; Full time

Benefits offered by this job

Equity

Flexible PTO

401(k)

Job summary

SpaceXSI in Austin, TX is hiring a Sr. Security Analyst for Third Party Risk Management. You will own the vendor risk lifecycle, perform due diligence, review SOC 2/ISO 27001 reports, and drive risk-based decisions with cross-functional teams across procurement, legal, security, and engineering.

The role requires 5+ years in TPRM, strong governance experience, and hands-on assessment skills in cloud and SaaS environments. Competitive compensation and equity are offered.

Qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or in an engineering/STEM discipline.
• 5+ years of experience in third-party risk management, vendor security, cybersecurity GRC, IT audit, or a security role with hands-on assessments.

Responsibilities

• Own the end-to-end third-party risk lifecycle for vendors across the company.
• Design and maintain the risk-tiering methodology and inherent risk questionnaire.
• Conduct security, privacy, and business due diligence and review security documentation.
• Translate findings into risk decisions and document risk exceptions with clear rationale.
• Develop and maintain TPRM policies, standards, and runbooks aligned with SOC 2/ISO 27001 and NIST CSF.

Skills

Vendor risk management

GRC

Security governance

Cloud security

Communication

Education

Bachelor's degree in computer science, information security, cybersecurity, or in an engineering/STEM discipline

Tools

SOC 2 reports

ISO 27001

Penetration tests

Security ratings tools

Vanta/Drata/OneTrust

Job description

SpaceXSI in Austin, TX is hiring a Sr. Security Analyst for Third Party Risk Management. You will own the vendor risk lifecycle, perform due diligence, review SOC 2/ISO 27001 reports, and drive risk-based decisions with cross-functional teams across procurement, legal, security, and engineering.

The role requires 5+ years in TPRM, strong governance experience, and hands-on assessment skills in cloud and SaaS environments. Competitive compensation and equity are offered.