Senior Contract & Compliance Associate

Fortress Information Security•Orlando, FL

1d•$89,501 - $127,186•Remote

About The Position

The Senior Contract & Compliance Specialist independently manages procurement contracting activities and provides operational support for key components of Fortress's Third-Party Risk Management (TPRM) and subcontracting compliance programs. This role reviews and negotiates commercial agreements — including NDAs, MSAs, SOWs, SaaS and cloud agreements, DPAs, and amendments — using established playbooks and a delegation of authority matrix, while engaging Security and other subject matter experts when appropriate. Working collaboratively with stakeholders across the organization, this position plays a critical role in protecting Fortress's contractual and compliance interests, identifying cost savings, and ensuring operational continuity. For an experienced contracts professional, this is a compelling opportunity to take real ownership, expand expertise in third-party risk and compliance, and directly contribute to Fortress's success in a remote, cross-functional role.

Requirements

5+ years of relevant experience in contracts, procurement, compliance, third-party risk management, or a related function, including substantial hands-on experience independently reviewing and negotiating vendor contracts and NDAs and the ability to apply contracting experience across different agreement types.
Experience reviewing and negotiating vendor contract provisions related to information security, data protection, confidentiality, and risk, with the judgment to recognize when Security or other subject matter expertise is required.
Foundational knowledge of third-party risk management, vendor due diligence, and common information security concepts and terminology sufficient to support TPRM operations and effectively coordinate with Security and other subject matter experts; technical security assessment expertise is not required.
Demonstrated ability to independently manage multiple contracts, renewals, compliance activities, and deadlines while exercising sound judgment and escalating appropriately.
Excellent oral and written communication skills, including the ability to negotiate effectively with vendors and clearly communicate contract, risk, and compliance requirements to internal stakeholders.
Proficiency with Microsoft Office Suite and experience with contract management, task/workflow management, CRM, or similar business systems.
Proficiency using AI tools for professional work, including the ability to critically evaluate and validate AI-generated output before use.

Nice To Haves

Experience supporting the day-to-day operation of a TPRM program, including vendor intake, due diligence, monitoring, or reassessments.
Knowledge of GSA subcontracting plan requirements or experience supporting subcontracting plan compliance.
Current recognized TPRM certification; candidates without a certification will be expected to obtain one within six months of hire with Fortress sponsorship.

Responsibilities

Manage assigned vendor contracting end to end, including negotiating pricing and commercial terms and reviewing and negotiating NDAs, MSAs, SOWs, SaaS and cloud agreements, order forms, DPAs, amendments, renewals, and other vendor agreements using established playbooks and the delegation of authority matrix
Review and negotiate information security, data protection, confidentiality, insurance, liability, and other risk provisions within established parameters, engaging Security or other subject matter experts when appropriate.
Negotiate commercial terms to protect Fortress's interests, identify opportunities for cost savings or avoidance, and appropriately escalate exceptions outside established authority.
Proactively manage contract renewals, obligations, and key dates to prevent avoidable expirations, unfavorable renewals, and operational disruptions.
Manage day-to-day TPRM operational activities, including vendor intake, initial risk determination, due diligence coordination, documentation, ongoing monitoring, and reassessments, ensuring requirements and timelines are met.
Manage day-to-day subcontracting plan compliance, including documentation, tracking, deadlines, and reporting, in partnership with the Government Compliance Manager and other subject matter experts.
Maintain accurate and timely contract, TPRM, and compliance records to support reporting, compliance, and audit readiness.
Collaborate with business stakeholders throughout contract negotiations to understand business needs, evaluate proposed terms and tradeoffs, incorporate stakeholder feedback, and move agreements toward resolution; mentor junior team members and support additional contracting and compliance activities as business needs evolve.

Benefits

Remote and Hybrid working environment
Competitive pay structure
Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
Company paid life, short- and long-term disability insurance
Employee Assistance Program
401(k) match
Flexible Paid Time Off
Parental Leave
professional growth opportunities through succession planning, up-skilling, and certifications
Tuition and certification reimbursement
Employee Referral Programs
Company Sponsored Events