Supplier Security & Assurance, Security GRC

Highlights

• Run end-to-end security assessments for vendors powering a frontier AI lab.
• Drive vendor findings to closure and manage continuous monitoring post-approval.
• Help shape the agent-first assessment platform and program roadmap.

What they offer

• Competitive compensation and benefits
• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours

Ideal candidate

A pragmatic security risk thinker who enjoys assessing vendors end-to-end and driving issues to closure through influence. You have strong judgment with incomplete evidence and are excited to build agent-first assurance at a frontier AI lab.

Requirements

• Experience running supplier security assessments end-to-end at a technology company
• Working knowledge of risk fundamentals including inherent and residual risk and risk acceptance
• Ability to assess a vendor across security domains and route to specialists when needed
• Track record of driving risk treatment to closure through influence across teams
• Experience building or tuning an LLM-backed workflow or automation in a risk or compliance context
• Experience building or operating issue management workflows with owner, due date and escalation
• Working technical knowledge of SaaS security configuration (SSO and SCIM, admin scoping, sharing defaults, audit log export)