Overview
As a TPRM Specialist at Deel, you will lead and improve our vendor risk program across a global ecosystem. You will assess security posture, oversee questionnaire and contract governance, and drive remediation with cross-functional partners. Your work will shape risk decisions, audits, and compliance across SaaS, cloud, and AI providers. This role offers impact at scale within a fast-growing, inclusive tech company.
Leistungen / Benefits
- Stock grant opportunities
- Flexible working office membership
- Additional country-based perks and benefits
- Competitive total rewards program
- Disability and accommodations support
- Inclusive, equal-opportunity employer
Verantwortungsbereiche
- Design and manage vendor security assessment workflows and integrate security questionnaires (Panorays, etc.)
- Develop and maintain vendor risk scoring models and track KRIs
- Own questionnaire lifecycle: intake, responses, remediation, and risk decision integration
- Negotiate security clauses, data protection terms, audit rights, and incident notification obligations in contracts
- Monitor and coordinate responses to vendor security incidents and breaches
- Establish ongoing vendor monitoring through automated tools and re-assessments
- Author and maintain TPRM policies and tiering frameworks aligned with SOC2, ISO 27001, GDPR
- Collaborate with DevSecOps, procurement, legal, and business teams to implement risk findings across the organization
- Produce executive vendor risk insights and remediation progress reports
Zentrale Anforderungen
- 5+ years in Information Security with at least 3 years in Third-Party Risk Management or supply chain security
- Technical literacy in AI automation and SaaS/cloud architecture; knowledge of vendor security controls
- Experience with security questionnaire frameworks (Panorays, OneTrust, Archer) and vendor risk scoring
- Strong understanding of SOC2, ISO 27001, GDPR, HIPAA; ability to translate requirements into vendor terms
- Contract and legal acumen; comfortable negotiating with legal and procurement
- Analytical mindset with ability to assess complex vendor security postures and propose mitigations
- Analytical thinking
- Cross-functional collaboration
- Negotiation with legal and procurement
- AI automation (Gemini, Claude)
- TPRM tools and GRC platforms (OneTrust, Archer)
- Security questionnaires and assessment frameworks
InfoSec Third Party Risk Management (TPRM) Specialist in Oldenburg Arbeitgeber: Deel
Deel ist ein hervorragender Arbeitgeber, der seinen Mitarbeitern die Möglichkeit bietet, in einem dynamischen und vielfältigen Umfeld zu arbeiten, das Innovation und kontinuierliches Lernen fördert. Mit einer starken Unternehmenskultur, die auf Inklusion und Chancengleichheit setzt, profitieren Mitarbeiter von flexiblen Arbeitsmodellen, umfangreichen Schulungs- und Entwicklungsmöglichkeiten sowie attraktiven Vergütungsprogrammen. Als Teil eines globalen Teams haben Sie die Chance, bedeutende Herausforderungen zu meistern und einen echten Einfluss auf die Zukunft der Arbeit zu nehmen.
