SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 166,000 - 228,000 / annual
Okta is seeking a Staff-level Third Party Risk Management professional to lead and scale the company's third-party risk program. This is a high-impact individual contributor role focused on building automation, establishing governance, and driving operational excellence across the TPRM lifecycle.
Key Responsibilities:
- Lead complex third-party security assessments and communicate risk trade-offs to executive leadership
- Engineer custom AI agents, workflows, and automation solutions to scale TPRM operations and optimize risk data processing
- Analyze technical and integration risks to establish supply-chain visibility and evaluate blast radius
- Drive risk remediation with third parties and internal stakeholders, providing actionable guidance aligned with Okta security standards
- Develop and maintain relationships with global cross-functional stakeholders and suppliers
- Partner with teams to streamline third-party onboarding, offboarding, and continuous monitoring workflows
- Design and execute third-party review activities, vendor monitoring, and event-driven re-assessments
- Develop data analytics workflows and establish KRIs/KPIs for team metrics and executive reporting
- Develop and refine standardized risk assessment methodologies, playbooks, and procedures
- Drive TPRM program maturity and governance alignment with company security strategy
- Support ad hoc GRC initiatives and program enhancements
This role requires hands-on technical depth in automation and AI, combined with strategic program leadership. You will work across multiple offices in a hybrid arrangement and report into the security/GRC function.
Requirements:
- Bachelor's degree (BA/BS) in relevant field
- 7+ years of experience conducting security assessments on third parties across regulations and frameworks (ISO 27001, PCI, NIST, or equivalent global frameworks)
- Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions
- Strong ability to analyze and interpret third-party security artifacts, certifications, and technical reports (SOC 2 Type II, ISO 27001, FedRAMP, SIG)
- Ability to effectively communicate with internal and external stakeholders and balance security requirements with business priorities
- Hands-on experience with GRC and TPRM platforms and solutions
- Deep understanding of foundational security principles and standard methodologies (logging, data handling, authorization, authentication)
- Excellent verbal, written, and interpersonal skills
- Ability to manage multiple priority initiatives and deliver under tight timelines
- Comfortable with ambiguity and adaptable to fast-changing environments
