Staff, Third-Party Risk & AI Automation

Okta; Seattle (WA); Hybrid; USD 166,000 - 228,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k)

Paid leave including PTO and parental

Job summary

Okta is seeking a Staff, Third Party Risk Management to lead complex third-party security assessments and drive automation across the TPRM lifecycle. You will engage with leadership, build AI-enabled workflows, and improve risk visibility across our supply chain.

The role emphasizes collaboration with global stakeholders, integration of risk data, and continuous improvement of assessment methodologies within a fast-paced security program.

Qualifications

• 7+ years of experience conducting security assessments on Third Parties across ISO 27001, PCI, NIST or other global frameworks.
• Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions.
• Experience analyzing third-party security artifacts, certifications, and reports (SOC 2 Type II, ISO 27001, FedRAMP, SIG).
• Experience with GRC/TPRM platforms and solutions.

Responsibilities

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive automation across the TPRM lifecycle by engineering AI agents, capabilities, and workflows.
• Analyze risks to establish supply-chain visibility and evaluate blast radius.
• Drive risk remediation with third parties and internal stakeholders.

Skills

Third-party security assessments

Automation

Python/APIs

GRC/TPRM platforms

Stakeholder communication

Security fundamentals

Education

BA/BS degree

Tools

Python

APIs

Job description

Okta is seeking a Staff, Third Party Risk Management to lead complex third-party security assessments and drive automation across the TPRM lifecycle. You will engage with leadership, build AI-enabled workflows, and improve risk visibility across our supply chain.

The role emphasizes collaboration with global stakeholders, integration of risk data, and continuous improvement of assessment methodologies within a fast-paced security program.