Staff, AI Security & TPRM Automation

Okta; Bellevue (WA); Hybrid; USD 166,000 - 228,000; Full time

Job summary

Okta is hiring a Staff, Third Party Risk Management to lead complex third-party security assessments and advance automation across the TPRM lifecycle. You will analyze risk, drive remediation with vendors, and collaborate with global stakeholders to strengthen governance and reporting.

The role requires 7+ years of security assessment experience, hands-on scripting (Python/APIs), and familiarity with frameworks like ISO 27001, PCI, and NIST.

Qualifications

• BA/BS in a relevant field and 7+ years of security assessments of third parties.
• Experience with ISO 27001, PCI, NIST or similar frameworks.
• Hands-on with scripts, APIs (Python) and AI agentic solutions.

Responsibilities

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows.
• Analyze technical and integration risks to establish deeper supply-chain risk visibility.
• Drive risk remediation with third parties and internal stakeholders, providing actionable guidance.
• Develop and maintain strong relationships with global cross functional stakeholders and third party suppliers.
• Partner with cross-functional teams to streamline third-party onboarding/offboarding workflows.
• Design and execute third-party review activities, continuous vendor monitoring, and re-assessments.
• Develop data analytics workflows and establish KRIs and KPIs for executive reporting.
• Develop, maintain, and refine standardized risk assessment methodologies, playbooks, and procedures.
• Drive TPRM program maturity and execution in line with security strategy.

Skills

Security assessments

Automation & scripting

Python & APIs

GRC platforms

Stakeholder communication

Risk management

Education

BA/BS degree

Tools

GRC tools

Job description

Okta is hiring a Staff, Third Party Risk Management to lead complex third-party security assessments and advance automation across the TPRM lifecycle. You will analyze risk, drive remediation with vendors, and collaborate with global stakeholders to strengthen governance and reporting.

The role requires 7+ years of security assessment experience, hands-on scripting (Python/APIs), and familiarity with frameworks like ISO 27001, PCI, and NIST.