Information Security Third-Party Risk Management Specialist Full Time Remote NEW

Overview

Deel is hiring an Information Security Third-Party Risk Management Specialist to manage vendor security assessments, identify third-party risks and strengthen supplier compliance. The role focuses on SaaS security, AI-related risks, vendor governance and automation of risk management processes within a global technology environment.

Key Areas of Expertise

• Third-party security assessments and vendor risk evaluation.
• Security certifications and compliance reviews, including SOC 2 and ISO 27001.
• AI-powered process automation using tools such as Gemini and Claude.
• Vendor contracts, security clauses and service-level agreements.
• SaaS security, cloud risks and emerging AI vendor threats .
• TPRM platforms such as Panorays, OneTrust and Archer.

Responsibilities

• Manage vendor security assessments, questionnaires and risk evaluations.
• Develop risk scoring models and monitor vendor security indicators.
• Review vendor compliance evidence and track remediation activities.
• Collaborate on contract requirements and security terms with the legal and procurement teams.
• Organize enquiries and reactions to security events involving third parties.
• Maintain audit records and set up ongoing vendor monitoring.
• Maintain third-party risk policies and governance frameworks jobs in Oman.
• Collaborate with cybersecurity, compliance, legal and business teams.
• Prepare management reports on vendor risks and remediation progress.
• Automate assessment workflows and improve risk management processes.

Qualifications

• 5+ years of information security experience, including at least 3 years in third-party risk management or vendor security.
• Knowledge of SaaS architecture, AI automation and vendor security controls.
• Experience with security assessment tools such as Panorays, OneTrust or Archer.
• Understanding of SOC 2, ISO 27001, GDPR, HIPAA and related compliance standards.
• Familiarity with vendor contracts, SLAs and data protection agreements.
• Strong analytical, communication and risk assessment skills.
• Ability to identify security weaknesses and recommend effective mitigation measures.

Nice to Haves

• Experience in SaaS or high-growth technology companies.
• Background in remote-first or globally distributed teams.
• Experience developing vendor risk management programs.
• Knowledge of procurement, contract management or vendor governance.
• Practical experience with Panorays and other GRC platforms.

Apply Now

Interested candidates can apply through the official website.