Own the compliance process day to day, work hands-on across audits, policy, and risk, mentor a junior teammate, and talk through risks with engineering, IT, and the business.
Responsibilities
Facilitating SOC 1 and SOC 2 attestations and other external audits from scoping through fieldwork
Owning information security policy governance
Running enterprise security risk program
Managing vendor risk assessments and helping choose and set up GRC tooling
Reporting program health to leadership and partnering with CloudOps, IT, and Dev
Lead third‑party risk management for SpaceXSI, owning the end‑to‑end vendor risk lifecycle and ensuring compliance with cybersecurity and regulatory frameworks.
Locations (4)
Austin, Texas, United States
New York, New York, United States
Palo Alto, California, United States
Washington, District of Columbia, United States
Compensation
$132,000 - $228,000 USD
Responsibilities
Own the end‑to‑end third‑party risk lifecycle
Design and maintain risk‑tiering methodology
Conduct security, privacy, and business due diligence
Critically review assurance reports and documentation
Translate findings into risk decisions
Requirements
Bachelor's degree in computer science
Bachelor's degree in information security
Bachelor's degree in cybersecurity
Bachelor's degree in engineering or STEM discipline
Nice to have: 7+ years of third‑party risk experience
