Vendor Security & Assurance Lead (GRC)

United States Digital Space LLC; United States; On-site; USD 255,000 - 270,000; Full time

Job summary

United States Digital Space LLC is seeking a Supplier Security & Assurance professional to lead end-to-end assessments of vendor security and risk for the company’s supplier ecosystem.

You will review evidence, determine inherent and residual risk, drive closure with vendors and business owners, and shape tooling and requirements for the program, including maintaining an LLm-powered assessment platform. This hybrid role requires collaborating across security, legal, and procurement.

Qualifications

• Experience running supplier security assessments end to end
• Knowledge of risk fundamentals and applying them to evidence
• Ability to assess vendors across security domains
• Track record influencing teams to close risks
• Experience building or tuning LLM-backed workflows
• Experience with issue management workflows
• Technical knowledge of SaaS security config and vendor contracts
• Ability to read SOC 2 or tests and derive findings

Responsibilities

• Run supplier security assessments end to end
• Operate supplier issue management with severity, owner, and due date
• Drive remediation with the vendor and business owner
• Record risk acceptances and roll issues to the risk register
• Perform continuous monitoring after approval
• Improve the program and tooling as you run it
• Maintain the Claude-powered assessment platform

Skills

Supplier assessments

Risk fundamentals

LLM workflow

Issue management

SaaS security

SOC 2 reading

Vendor management

Cross-team influence

Prompt tuning

Education

Bachelor’s degree

Job description

United States Digital Space LLC is seeking a Supplier Security & Assurance professional to lead end-to-end assessments of vendor security and risk for the company’s supplier ecosystem.

You will review evidence, determine inherent and residual risk, drive closure with vendors and business owners, and shape tooling and requirements for the program, including maintaining an LLm-powered assessment platform. This hybrid role requires collaborating across security, legal, and procurement.