Staff, Third Party Risk Management

Okta•Washington, DC

2d•$148,000 - $228,000•Hybrid

About The Position

Okta is hiring a Staff, Third Party Risk Management professional to advance its third-party risk management (TPRM) program and security strategy. The role leads complex third-party security assessments, analyzes supply-chain and integration risks, and drives remediation with suppliers and internal stakeholders. It also advances TPRM operations through automation, including custom AI agents and workflows, and develops analytics, metrics, methodologies, and governance practices. The position partners with global cross-functional teams to improve vendor onboarding, offboarding, monitoring, and review processes.

Requirements

Relevant BA/BS degree.
7+ years of experience conducting third-party security assessments across regulations and common industry frameworks, including ISO 27001, PCI, NIST, or other relevant global security frameworks.
Hands-on experience building automated workflows, scripts using Python/APIs, and AI agentic solutions.
Ability to analyze and interpret third-party security artifacts, certifications, and technical reports, such as SOC 2 Type II, ISO 27001, FedRAMP, and SIG.
Ability to communicate effectively with internal and external stakeholders, ensure security requirements are understood, and prioritize business needs appropriately.
Hands-on experience with GRC and TPRM platforms and solutions.
Deep understanding of foundational security principles and standard methodologies, including logging, data handling, authorization, and authentication.
Excellent verbal, written, and interpersonal skills.
Ability to manage multiple priority initiatives and deliver results under tight timelines.
Comfort with ambiguity and adaptability in fast-changing environments.

Responsibilities

Lead complex third-party security assessments and communicate risk trade-offs to leadership.
Drive technical automation across the TPRM lifecycle by engineering custom AI agents, capabilities, and workflows to integrate tool outputs, optimize risk data processing, and scale operations.
Analyze technical and integration risks to improve supply-chain risk visibility and evaluate potential blast radius.
Drive risk remediation with third parties and internal stakeholders, providing actionable guidance aligned with Okta security standards.
Develop and maintain strong relationships with global cross-functional stakeholders and third-party suppliers.
Partner with cross-functional teams to streamline and optimize third-party onboarding and offboarding workflows.
Design and execute third-party review activities, continuous vendor monitoring, and event-driven reassessments.
Develop data analytics workflows and establish KRIs and KPIs to elevate team metrics and executive reporting.
Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures.
Drive TPRM program maturity and execution, aligning third-party risk governance with company goals and security strategy.
Support ad hoc projects, including program enhancements, security initiatives, and other GRC functions.