Staff, Third-Party Risk & AI Security (Hybrid)

Okta Inc.; United States; Hybrid; USD 166,000 - 228,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

401(k)

Flexible spending account

Paid leave

Parental leave

Job summary

Okta Inc. is seeking a Staff member in Third Party Risk Management to lead complex security assessments of external partners and to automate TPRM workflows using AI-enabled agents.

You will collaborate with global stakeholders to align risk posture with Okta security standards and drive continuous improvement in onboarding/offboarding and risk reporting. The role demands hands-on experience with standards like ISO 27001, PCI, and NIST, strong communication, and the ability to manage multiple

Qualifications

• 7+ years of security assessments on third parties across frameworks (ISO 27001, PCI, NIST).
• Hands-on automation with scripts and AI agentic solutions.
• Ability to interpret security artifacts and reports (SOC 2 Type II, ISO 27001, FedRAMP).

Responsibilities

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive automation across the TPRM lifecycle with AI agents and workflows.
• Analyze technical and integration risks to enhance supply-chain visibility.
• Drive risk remediation with third parties and internal stakeholders.
• Partner with cross-functional teams to optimize onboarding/offboarding workflows.
• Develop KRIs/KPIs and refine risk assessment playbooks.

Skills

Security assessments

Python scripting

AI agentic solutions

TPRM platforms

ISO 27001

NIST

PCI

Education

BA/BS degree

Tools

GRC platforms

Automation tooling

Job description

Okta Inc. is seeking a Staff member in Third Party Risk Management to lead complex security assessments of external partners and to automate TPRM workflows using AI-enabled agents.

You will collaborate with global stakeholders to align risk posture with Okta security standards and drive continuous improvement in onboarding/offboarding and risk reporting. The role demands hands-on experience with standards like ISO 27001, PCI, and NIST, strong communication, and the ability to manage multiple