Third Party Risk Management and Customer Trust Lead
Remote • Foster City, CA • FullTime
Posted 20d ago
Job Location
Foster City, CA
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
Replit is seeking a lead for Security Vendor Risk & Contract Reviews to architect and execute a risk management program focused on substantive evaluation. This role involves analyzing SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, and collaborating with the Legal team to secure necessary contractual protections. Reporting to the Head of Security GRC, this position requires high-impact partnerships across Legal, Engineering, and Product teams, with a focus on managing risks associated with external services and AI model partners.
Responsibilities
- Manage third-party risk management (TPRM), evaluating real risk beyond questionnaire responses.
- Review SOC 2 reports, pen test findings, and architecture documentation to assess vendor risk, including AI/model providers.
- Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions.
- Review contracts for non-standard security language and recommend redlines.
- Maintain the vendor and AI/model risk register, integrating findings into the company's master risk register.
- Mature the customer trust program to enable sales.
- Develop capabilities for continuous monitoring of the vendor ecosystem.
Requirements
- 8+ years in third-party/vendor risk management, security risk, or a related GRC role.
- Demonstrated ability to independently assess vendor risk by analyzing SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation.
- Experience reviewing or redlining security and data-handling contract language, preferably with legal team collaboration.
- Working knowledge of data privacy fundamentals (GDPR, CCPA) concerning vendor and subprocessor relationships.
- Strong cross-functional collaboration skills with Legal, Engineering, Product, and Sales.
- Experience building repeatable, scalable vendor review processes.
Benefits
- Competitive Salary & Equity
- 401(k) Program with a 4% match (US Only)
- Health, Dental, Vision and Life Insurance
- Short Term and Long Term Disability
- Paid Parental, Medical, Caregiver Leave
- Flexible Time Off (FTO) + Holidays
- Commuter Benefits (In-Office Only)
- Monthly Wellness Stipend
- Autonomous Work Environment
- In Office Set-Up Reimbursement (In-Office Only)
- Quarterly Team Gatherings
- In Office Amenities (In-Office Only)