Vendor Security Technical Program Manager

Job summary

Responsibilities

We are looking for a Vendor Security Technical Program Manager who can make sound security decisions and turn recurring vendor-security problems into tools and practices that work.

• Own vendor security engagements from understanding the business need through scoping, assessment, decision, treatment, and reassessment when material facts change.
• Understand vendor use cases, workflows, user journeys, data flows, identities, access, integrations, and supply-chain dependencies.
• Assess relevant architectures, configurations, controls, logs, and operational practices. Test whether the evidence supports the security claims that matter to the engagement…
• Develop practical treatments, including changes to the operating model, data exposure, access, architecture, vendor choice, controls, or containment.
• Build reusable security patterns with clear applicability, safeguards, evidence requirements, exceptions, and review triggers.