About this role
Secure Every Identity, from AI to Human
Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
Staff, Third Party Risk Management
Responsibilities:
• Lead complex third-party security assessments and communicate risk trade-offs to leadership.
• Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows to integrate tool outputs, optimize risk data processing and scale operations.
• Analyze technical and integration risks to establish deeper supply-chain risk visibility and evaluate potential blast radius.
• Drive risk remediation with third parties and internal stakeholders, providing actionable guidance in alignment with Okta security standards.
• Develop and maintain strong relationships with global cross functional stakeholders and third party suppliers.
• Partner with cross-functional teams to streamline and optimize third-party onboarding and offboarding workflows.
• Design and execute third-party review activities, continuous vendor monitoring, and event-driven re-assessments.
• Develop data analytics workflows and establish KRIs and KPIs to elevate team metrics and executive reporting.
• Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures.
• Drive TPRM program maturity and execution, aligning third-party risk governance with the company’s goals and security strategy.
• Support ad hoc projects including program enhancements, security initiatives, and other GRC functions.
Requirements :
• Relevant BA/BS degree.
• 7+ years of working experience conducting security assessments on Third Parties across regulations and common industry frameworks including but not limited to ISO 27001, PCI, NIST or other global relevant security frameworks.
• Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions.
• Strong ability to analyze and interpret third-party security artifacts, certifications, and technical reports (e.g., SOC 2 Type II, ISO 27001, FedRAMP, SIG).
• Ability to effectively communicate with both internal and external stakeholders, and ensure security requirements are understood and business needs are prioritized appropriately.
• Hands-on experience of GRC and TPRM platforms and solutions.
• Deep understanding of foundational security principles, standard methodologies (i.e. logging, data handling, authorization, authentication).
• Excellent verbal, written, and interpersonal skills.
• Ability to manage multiple priority init