Staff, TPRM & Security Automation Lead

Okta Inc.; Bellevue (WA); Hybrid; USD 148,000 - 204,000; Full time

Job summary

Okta Inc. is seeking an experienced security leader to own third-party risk management across the vendor life cycle in a hybrid, United States-based position. You will lead complex risk assessments, drive automation of workflows with Python/APIs, and communicate risk trade-offs to executive leadership.

The role requires hands-on experience with ISO 27001, PCI, NIST, and GRC/TPRM platforms. You will collaborate with cross-functional teams and external vendors to streamline onboarding/offboarding,

Qualifications

• Relevant BA/BS degree.
• 7+ years of security assessments on third parties across regulations and frameworks.
• Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions.
• Ability to analyze third-party security artifacts, certifications, and reports (SOC 2 Type II, ISO 27001, FedRAMP).
• Excellent verbal, written, and interpersonal skills.
• Experience with GRC/TPRM platforms and solutions.

Responsibilities

• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive automation across the TPRM lifecycle with AI agents and workflows.
• Analyze risks to establish deeper supply-chain visibility and evaluate blast radius.
• Drive remediation with third parties and internal stakeholders per OKTA security standards.
• Develop and maintain KRIs/KPIs to elevate team metrics and exec reporting.
• Develop standard risk assessment methodologies, playbooks, and procedures.
• Support ad hoc projects including program enhancements and other GRC functions.

Skills

Security assessments

Python scripting/APIs

Communication

GRC/TPRM platforms

Education

BA/BS degree

Tools

GRC platforms

Automation scripting

Job description

Okta Inc. is seeking an experienced security leader to own third-party risk management across the vendor life cycle in a hybrid, United States-based position. You will lead complex risk assessments, drive automation of workflows with Python/APIs, and communicate risk trade-offs to executive leadership.

The role requires hands-on experience with ISO 27001, PCI, NIST, and GRC/TPRM platforms. You will collaborate with cross-functional teams and external vendors to streamline onboarding/offboarding,